Skip to content

Commit

Permalink
[8.15] (Doc+) Alerts UI cannot be CCS [serverless] + bonus fixes (bac…
Browse files Browse the repository at this point in the history
…kport #5582) (#5585)

* (Doc+) Alerts UI cannot be CCS [serverless] + bonus fixes (#5582)

* Add admonition to serverless

Serverless follow up to #5513

* Update serverless to match ESS

Serverless follow up to #4695

* Fix URL variable/attribute

Should use `kibana-ref` instead of apm-app-ref since this has nothing to do with APM

* No-op change to trigger build

(i hope)

(cherry picked from commit 9e7d734)

# Conflicts:
#	docs/serverless/explore/data-views-in-sec.mdx

* Delete docs/serverless directory and its contents

---------

Co-authored-by: Joe Peeples <[email protected]>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
  • Loading branch information
3 people authored Jul 19, 2024
1 parent 57d495a commit 8048133
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions docs/getting-started/data-views-in-sec.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,7 @@ IMPORTANT: Custom indices are not included in the <<default-data-view-security,
[discrete]
== Switch to another {data-source}

You can tell which {data-source} is active by clicking the *{data-source-cap}* menu at the upper right of {elastic-sec} pages that display event or alert data, such as Overview, Alerts, Timelines, or Hosts.
To switch to another {data-source}, click **Choose {data-source}**, select one of the options, and click **Save**.
You can tell which {data-source} is active by clicking the *{data-source-cap}* menu at the upper right of {elastic-sec} pages that display event or alert data, such as Overview, Alerts, Timelines, or Hosts. To switch to another {data-source}, click **Choose {data-source}**, select one of the options, and click **Save**.

image::images/dataview-button-highlighted.png[image highlighting how to open the data view selection menu]

Expand All @@ -20,7 +19,7 @@ image::images/dataview-button-highlighted.png[image highlighting how to open the

To learn how to modify the default **Security Default Data View**, refer to <<update-sec-indices, Update default {elastic-sec} indices>>.

To learn how to modify, create, or delete another {data-source} refer to {apm-app-ref}/data-views.html[{kib} {data-sources-cap}].
To learn how to modify, create, or delete another {data-source} refer to {kibana-ref}/data-views.html[{kib} {data-sources-cap}].

You can also temporarily modify the active {data-source} from the *{data-source-cap}* menu by clicking *Advanced options*, then adding or removing index patterns.

Expand All @@ -36,6 +35,6 @@ NOTE: You cannot update the data view for the Alerts page. This includes referen

The default {data-source} is defined by the `securitySolution:defaultIndex` setting, which you can modify in {kib}'s advanced settings (**Stack Management** > **Advanced Settings** > **Security Solution**). To learn more about this setting, including its default value, refer to {security-guide}/advanced-settings.html#update-sec-indices[Advanced settings].

The first time a user visits {elastic-sec} within a given {kib} {apm-app-ref}/xpack-spaces.html[space], the default {data-source} generates in that space and becomes active.
The first time a user visits {elastic-sec} within a given {kib} {kibana-ref}/xpack-spaces.html[space], the default {data-source} generates in that space and becomes active.

If you delete the active {data-source} when there are no other defined {data-sources}, the default {data-source} will regenerate and become active upon refreshing any {elastic-sec} page in the space.

0 comments on commit 8048133

Please sign in to comment.