Skip to content

Commit ccbb376

Browse files
[8.5] Manual prebuilt rule updates support notice (backport #4934) (#4962)
* Manual prebuilt rule updates support notice (#4934) * Add statement to relevant pages - Upgrade Elastic Security - Install and manage Elastic prebuilt rules * Update docs/detections/prebuilt-rules-management.asciidoc Co-authored-by: Benjamin Ironside Goldstein <[email protected]> * Update docs/upgrade/upgrade-security.asciidoc Co-authored-by: Nastasha Solomon <[email protected]> * Update docs/upgrade/upgrade-security.asciidoc --------- Co-authored-by: Benjamin Ironside Goldstein <[email protected]> Co-authored-by: Nastasha Solomon <[email protected]> (cherry picked from commit 9ad5d70) # Conflicts: # docs/detections/prebuilt-rules-management.asciidoc # docs/upgrade/upgrade-security.asciidoc * Fix merge conflict * Delete docs/detections/prebuilt-rules-management.asciidoc Fix merge conflict --------- Co-authored-by: Joe Peeples <[email protected]>
1 parent b66d7d9 commit ccbb376

File tree

2 files changed

+11
-2
lines changed

2 files changed

+11
-2
lines changed

docs/detections/rules-ui-manage.asciidoc

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,10 +46,11 @@ You can then activate whichever rules you want. If you delete any prebuilt rules
4646

4747
[NOTE]
4848
==============
49-
Apart from the Elastic Endpoint rule, prebuilt rules are not activated by
49+
* Apart from the Elastic Endpoint rule, prebuilt rules are not activated by
5050
default. If you want to modify a prebuilt rule, you must first duplicate it, then make your changes to the duplicated rule. All Elastic prebuilt rules are tagged with the word `Elastic`.
51-
51+
+
5252
To learn how to enable detection rules in Elastic Security, watch the <<enable-detection-rules, tutorial>> at the end of this topic.
53+
* Automatic updates of Elastic prebuilt rules are supported for the current {elastic-sec} version and the latest three previous minor releases. For example, if you’re on {elastic-sec} 8.10, you’ll be able to use the Rules UI to update your prebuilt rules until {elastic-sec} 8.14 is released. After that point, you can still manually download and install updated prebuilt rules, but you must upgrade to the latest {elastic-sec} version to receive automatic updates.
5354
==============
5455

5556
[float]

docs/upgrade/upgrade-security.asciidoc

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,14 @@ For large deployments with more than 10 {kib} instances, and more than 10,000 sa
4040
you can reduce the upgrade downtime by bringing up a single {kib} instance and waiting for it to
4141
complete the upgrade migration before bringing up the remaining instances.
4242

43+
IMPORTANT: You can upgrade to pre-release versions for testing,
44+
but upgrading from a pre-release to the Generally Available version is unsupported.
45+
You should use pre-release versions only for testing in a temporary environment.
46+
47+
[float]
48+
=== Support for Elastic prebuilt detection rule automatic updates
49+
<<load-prebuilt-rules,Automatic updates of Elastic prebuilt detection rules>> are supported for the current {elastic-sec} version and the latest three previous minor releases. For example, if you’re upgrading to {elastic-sec} 8.10, you’ll be able to use the Rules UI to update your prebuilt rules until {elastic-sec} 8.14 is released. After that point, you can still manually download and install updated prebuilt rules, but you must upgrade to the latest {elastic-sec} version to receive automatic updates.
50+
4351
[float]
4452
[[preventing-migration-failures]]
4553
=== Preparing for migration

0 commit comments

Comments
 (0)