add description for iris_alert_context field

jertel · Oct 24, 2023 · ee93942 · ee93942
1 parent 04b1be7
commit ee93942
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/source/ruletypes.rst b/docs/source/ruletypes.rst
@@ -2634,7 +2634,7 @@ Optional:
     - ``5`` - High
     - ``6`` - Critical.
 
-``iris_alert_context``:
+``iris_alert_context``: Include information from the match into the alert context. Working as key-value, where the key is your custom name and value - data from elasticsearch message.
 
 ``iris_iocs``: Description of the IOC to be added.