You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Update Compatibility with cold tier nodes section on Detections and Alerts page with proposed text below
Current Text:
Cold tier is a data tier that holds time series data that is accessed only occasionally. In Elastic Stack version >=7.11.0, Elastic Security supports cold tier data for the following Elasticsearch indices:
Index patterns specified in securitySolution:defaultIndex
Index patterns specified in the definitions of detection rules
Index patterns specified in the data sources selector on various Elastic Security app pages
Elastic Security does NOT support cold tier data for the following Elasticsearch indices:
Index patterns controlled by Elastic Security, including signals and list indices
Index patterns specified in indicator match rules as indicator index patterns
Using cold tier data for unsupported indices may result in detection rule timeouts and overall performance degradation.
Proposed Text:
Cold tier is a data tier that holds time series data that is accessed only occasionally. In Elastic Stack version >=7.11.0, Elastic Security supports cold tier data for the following Elasticsearch indices:
Index patterns specified in securitySolution:defaultIndex
Index patterns specified in the definitions of detection rules, except for Indicator Match rules
Index patterns specified in the data sources selector on various Elastic Security app pages
Elastic Security does NOT support cold tier data for the following Elasticsearch indices:
Index patterns controlled by Elastic Security, including signals and list indices
Index patterns specified in indicator match rules
Using cold tier data for unsupported indices may result in detection rule timeouts and overall performance degradation.
Screen shot of affected section(s) with proposed changes:
This documentation update includes changes to two identical sections:
Compatibility with cold tier nodes
section on Elastic Security overview page with proposed text belowCompatibility with cold tier nodes
section on Detections and Alerts page with proposed text belowCurrent Text:
Proposed Text:
Screen shot of affected section(s) with proposed changes:
cc: @jmikell821 @dontcallmesherryli
The text was updated successfully, but these errors were encountered: