Search results

[BUG] Missing param in exception list fetch

Team: Detection Engine

v8.15.0

Status: Draft (not ready).

elastic/security-docsnumber 6823

#6823 In elastic/security-docs;

· nastasha-solomon opened on May 5, 2025

Change LogsDB "Not Supported" message to "Caution" message as soon as three "how to check" sections are available.

blockedAn issue that's currently blocked because it’s pending info or action from stakeholders.An issue that's currently blocked because it’s pending info or action from stakeholders.

Docset: ESSIssues that apply to docs in the Stack releaseIssues that apply to docs in the Stack release

Docset: ServerlessIssues for Serverless SecurityIssues for Serverless Security

Priority: HighIssues that are time-sensitive and/or are of high customer importanceIssues that are time-sensitive and/or are of high customer importance

suggestionSuggestions to improve documentationSuggestions to improve documentation

Team: Detection Engine

v8.17.0

v8.18.0

v9.0.0

Status: Open.

#6526 In elastic/security-docs;

· MikePaquette opened on Feb 10, 2025

[Suggestion] Workarounds for case-insensitive exceptions use cases

Feature: Exceptions

Feature: Rules

suggestionSuggestions to improve documentationSuggestions to improve documentation

Team: Detection Engine

Status: Open.

#6439 In elastic/security-docs;

· banderror opened on Jan 21, 2025

[BUG] Missing param in exception list fetch

bugSomething isn't workingSomething isn't working

Docset: ESSIssues that apply to docs in the Stack releaseIssues that apply to docs in the Stack release

documentationImprovements or additions to documentationImprovements or additions to documentation

Feature: Exceptions

Team: Detection Engine

Status: Open.

#5966 In elastic/security-docs;

· yctercero opened on Oct 21, 2024

Clarify wildcard escaping rules for Endpoint alert exceptions, trusted apps, and event filters

bugSomething isn't workingSomething isn't working

Docset: ESSIssues that apply to docs in the Stack releaseIssues that apply to docs in the Stack release

Docset: ServerlessIssues for Serverless SecurityIssues for Serverless Security

Effort: MediumIssues that take moderate but not substantial time to completeIssues that take moderate but not substantial time to complete

enhancementNew feature or requestNew feature or request

Team: Detection Engine

Team: Docs

Team: EDR WorkflowsFormerly Defend Workflows, Onboarding and Lifecycle ManagementFormerly Defend Workflows, Onboarding and Lifecycle Management

Team: EndpointEndpoint related issuesEndpoint related issues

v8.14.0

Status: Open.

#5773 In elastic/security-docs;

· ferullo opened on Sep 4, 2024

[Enhancement]: For existing alerts, only alert with all events matching the condition are closed

enhancementNew feature or requestNew feature or request

Feature: Exceptions

Team: Detection Engine

Status: Open.

#5594 In elastic/security-docs;

· e40pud opened on Jul 23, 2024

[Enhancement]: Improve examples of detection rule exceptions using wildcards

enhancementNew feature or requestNew feature or request

sdh-linkedAssociated to SDHAssociated to SDH

Team: Detection Engine

Status: Open.

#5334 In elastic/security-docs;

· dhurley14 opened on Jun 6, 2024

[Enhancement]: Threshold rule exceptions constraints

enhancementNew feature or requestNew feature or request

Feature: Exceptions

Team: Detection Engine

Status: Open.

#4929 In elastic/security-docs;

· yctercero opened on Mar 18, 2024

Create and Manage Value Lists doc should contain more examples of accepted IP addresses formats

blockedAn issue that's currently blocked because it’s pending info or action from stakeholders.An issue that's currently blocked because it’s pending info or action from stakeholders.

Effort: MediumIssues that take moderate but not substantial time to completeIssues that take moderate but not substantial time to complete

Feature: Exceptions

Priority: LowIssues that need attention, but are not urgentIssues that need attention, but are not urgent

Team: Detection Engine

v8.10.0

v8.11.0

Status: Open.

#3754 In elastic/security-docs;

· renangenova opened on Aug 18, 2023

[Docs][Rules] - Data quality monitoring rules docs

blockedAn issue that's currently blocked because it’s pending info or action from stakeholders.An issue that's currently blocked because it’s pending info or action from stakeholders.

documentationImprovements or additions to documentationImprovements or additions to documentation

Effort: LargeIssues that require significant planning, research, writing, and testingIssues that require significant planning, research, writing, and testing

Feature: Rules

Priority: MediumIssues that have relevance, but aren't urgentIssues that have relevance, but aren't urgent

Team: Detection Engine

Team: Detections/ResponseDetections and ResponseDetections and Response

Status: Open.

#3274 In elastic/security-docs;

· yctercero opened on May 16, 2023

[Security Solution] Document the procedure for creating detection rule exceptions based on runtime fields

Feature: Exceptions

Team: Detection Engine

Status: Open.

#5868 In elastic/security-docs;

· andrew-goldstein opened on May 3, 2022