-
Notifications
You must be signed in to change notification settings - Fork 195
Open
Labels
Team:ExperienceIssues owned by the Experience Docs TeamIssues owned by the Experience Docs Teamsource:webIssues originating from the elastic.co docsIssues originating from the elastic.co docs
Description
Type of issue
Inaccurate
What documentation page is affected
https://www.elastic.co/docs/solutions/security/get-started/data-views-elastic-security
What happened?
This page states that "The Alerts page always shows data from .alerts-security.alerts-default".
However, elsewhere in the documentation it is stated that the Alerts page shows data from .alerts-security.alerts-<current-space>, which will only be .alerts-security.alerts-default if the user is in the Default Space.
Statements contradicting that the Alerts page will always show data from .alerts-security.alerts-default can be found in these other pages:
- "By default, alerts created by detection rules are stored in Elasticsearch indices under the .alerts-security.alerts-<space-name> index pattern" Spaces and Elastic Security
- "Elastic Security stores alerts that have been generated by detection rules in hidden Elasticsearch indices. The index pattern is .alerts-security.alerts-<space-id->" Alert schema
- "We recommend querying the .alerts-security.alerts-<space-id> index alias" Query alert indices
Additional info
No response
Metadata
Metadata
Assignees
Labels
Team:ExperienceIssues owned by the Experience Docs TeamIssues owned by the Experience Docs Teamsource:webIssues originating from the elastic.co docsIssues originating from the elastic.co docs