Skip to content

Commit

Permalink
Add note to rule exception docs (#1977)
Browse files Browse the repository at this point in the history
  • Loading branch information
joepeeples authored May 26, 2022
1 parent 27159dd commit f1788ba
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion docs/detections/detections-ui-exceptions.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -8,11 +8,16 @@ processes and network activity to function without producing unnecessary noise.

You can add multiple exceptions to one rule.

IMPORTANT: When you add an exception to the
[IMPORTANT]
=====
When you add an exception to the
<<endpoint-rule-exceptions, Elastic Endpoint Security>> rule, you can select to
add the exception to the Endpoint. When selected, the exception is added to
both the detection rule *and* the Elastic Endpoint agent on your hosts.
{ref}/binary.html[Binary fields] are not supported in detection rule exceptions.
=====

In addition to defining exception queries for source event values, you can use rule
exceptions with value lists. Value lists are lists of items with
the same {es} {ref}/mapping-types.html[data type]. You can create value lists
Expand Down

0 comments on commit f1788ba

Please sign in to comment.