Skip to content

Commit ba0feb1

Browse files
authored
Add context.alerts to rule creation UI and API docs (#448)
1 parent 14ee1a8 commit ba0feb1

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

docs/detections/api/rules/rules-api-create.asciidoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -453,6 +453,7 @@ All text fields (such as `message` fields) can contain placeholders for rule
453453
and alert details:
454454

455455
* `{{state.signals_count}}`: Number of alerts detected
456+
* `{{context.alerts}}`: Array of detected alerts
456457
* `{{{context.results_link}}}`: URL to the alerts in {kib}
457458
* `{{context.rule.anomaly_threshold}}`: Anomaly threshold score above which
458459
alerts are generated ({ml} rules only)

docs/detections/rules-ui-create.asciidoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -436,6 +436,7 @@ minutes at 14:03 but it does not run until 14:04, it will run again at 14:09.
436436
These placeholders can be added to <<rule-notifications, rule action>> fields:
437437

438438
* `{{state.signals_count}}`: Number of alerts detected
439+
* `{{context.alerts}}`: Array of detected alerts
439440
* `{{{context.results_link}}}`: URL to the alerts in {kib}
440441
* `{{context.rule.anomaly_threshold}}`: Anomaly threshold score above which
441442
alerts are generated ({ml} rules only)

0 commit comments

Comments
 (0)