[DOCS] Updating Elastic Security Overview topic #101922

jmikell821 · 2021-06-10T16:39:09Z

Addresses #98829.

elasticmachine · 2021-06-10T16:39:11Z

Pinging @elastic/kibana-docs (Team:Docs)

nastasha-solomon · 2021-06-10T17:20:48Z

docs/siem/siem-ui.asciidoc

+
+* Data is shipped from your hosts to {es} via beat modules and the Elastic
+Endpoint Security agent integration:
+** {security-guide}/install-endpoint.html[{es-sec-endpoint}] - Elastic agent integration that


Only flagging because I'm not sure why the {es-sec-endpoint} attribute is showing up as {es-sec-endpoint} in this sentence instead of Endpoint Security.

I think it needs to be one of the ones listed here: https://github.com/elastic/docs/blob/6367efdfd6ebbb1787e289f5fee67ba870e14c28/shared/attributes.asciidoc#L210-L212

nastasha-solomon · 2021-06-10T17:23:32Z

docs/siem/siem-ui.asciidoc

+event is discovered, a detection alert is generated. External systems, such as
+Slack and email, can be used to send notifications when alerts are generated.
+You can create your own rules and make use of our {security-guide}/prebuilt-rules.html[prebuilt ones].
+*** {security-guide}/detections-ui-exceptions.html [Exceptions]: Reduce noise and the number of


Think the space between the topic link and the [Exceptions] might need to be removed for the text to show up as linked text.

nastasha-solomon · 2021-06-10T17:24:37Z

docs/siem/siem-ui.asciidoc

+** {security-guide}/cases-overview.html[Cases]: An internal system for opening, tracking, and sharing
+security issues directly in the Security app. Cases can be integrated with
+external ticketing systems.
+** {security-guide}/admin-page-ov.html[Administration]: View and manage hosts running {es-sec-endpoint}.


Flagging because this is showing up as {es-sec-endpoint} instead of Endpoint Security in the output.

nastasha-solomon

Overall, LGTM!

lcawl · 2021-06-10T17:36:05Z

docs/siem/siem-ui.asciidoc

+false positives. Exceptions are associated with rules and prevent alerts when
+an exception's conditions are met. *Value lists* contain source event
+values that can be used as part of an exception's conditions. When
+{es-sec-endpoint} is installed on your hosts, you can add malware exceptions


I think this is another one that needs to be changed to either "{endpoint-sec}", "{elastic-sec}", or "{elastic-endpoint}" depending on the correct product for this context:

Suggested change

{es-sec-endpoint} is installed on your hosts, you can add malware exceptions

{endpoint-sec} is installed on your hosts, you can add malware exceptions

lcawl · 2021-06-10T17:37:45Z

docs/siem/siem-ui.asciidoc

+[discrete]
+=== Compatibility with cold tier nodes
+
+Cold tier is a {ref}/data-tiers.html[data tier] that holds time series data that is accessed only occasionally. In {stack} version >=7.11.0, {es-sec} supports cold tier data for the following {es} indices:


In {stack} version >=7.11.0, {es-sec} supports ...

This is another attribute that doesn't seem to exist in https://github.com/elastic/docs/blob/master/shared/attributes.asciidoc at the moment. It either needs to be added there or a different existing attribute chosen from that file.

KOTungseth

One small comment, but otherwise, LGTM.

docs/siem/siem-ui.asciidoc

…egrations-to-global-search * 'master' of github.com:elastic/kibana: (46 commits) [Lens] Add some more documentation for dynamic coloring (elastic#101369) hide not searchable results when no term (elastic#102401) [Lens] Fix Formula functional test with multiple suggestions (elastic#102378) Fix trusted apps modified by field displayed as a date field (elastic#102377) [Lens] Docs for time shift (elastic#102048) update readme of logs-metrics-ui (elastic#101968) Refactor observability plugin breadcrumbs (elastic#102290) [Index Patterns] Move rollup config to index pattern management v2 (elastic#102285) [Security Solution][Endpoint] Isolate Action should only be available to Platinum+ licenses (elastic#102374) [build] Updates Ironbank templates (elastic#102407) Update security best practices document (elastic#100814) [Enterprise Search] Set up initial KibanaPageTemplate (elastic#102170) [Reporting/Docs] Add section to troubleshooting guide to explain the StatusCodeError logs (elastic#102278) [DOCS] Updating Elastic Security Overview topic (elastic#101922) [Uptime] refactor Synthetics Integration package UI (elastic#102080) [Task Manager] Log at different levels based on the state (elastic#101751) [APM] Fixing time comparison types (elastic#101423) [RAC] Update alert documents in lifecycle rule type helper (elastic#101598) [ML] Functional tests - fix and re-activate alerting flyout test (elastic#102368) [Reporting] remove unused reference to path.data config (elastic#102267) ... # Conflicts: # x-pack/plugins/fleet/kibana.json

kibanamachine · 2021-06-18T19:48:16Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

kibanamachine · 2021-06-21T19:58:15Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

kibanamachine · 2021-06-22T20:08:15Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks

kibanamachine · 2021-06-22T20:26:30Z

💚 Backport successful

Status	Branch	Result
✅	7.13
✅	7.x

The backport PRs will be merged automatically after passing CI.

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks Co-authored-by: Janeen Mikell-Straughn <57149392+jmikell821@users.noreply.github.com>

updating overview topic for Kibana

ba8d840

jmikell821 added Team:Docs release_note:skip Skip the PR/issue when compiling release notes v7.13.0 labels Jun 10, 2021

jmikell821 requested review from lcawl and nastasha-solomon June 10, 2021 16:39

jmikell821 requested a review from KOTungseth June 10, 2021 16:50

nastasha-solomon reviewed Jun 10, 2021

View reviewed changes

nastasha-solomon approved these changes Jun 10, 2021

View reviewed changes

lcawl reviewed Jun 10, 2021

View reviewed changes

KOTungseth approved these changes Jun 10, 2021

View reviewed changes

docs/siem/siem-ui.asciidoc Outdated Show resolved Hide resolved

jmikell821 added 3 commits June 10, 2021 13:57

formatting fixes

916b26a

small formatting tweaks

fc264f3

small formatting tweaks

febc63f

jmikell821 merged commit dcb5a67 into elastic:master Jun 16, 2021

kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Jun 18, 2021

jmikell821 added v7.14.0 v8.0.0 auto-backport Deprecated - use backport:version if exact versions are needed labels Jun 22, 2021

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jun 22, 2021

[DOCS] Updating Elastic Security Overview topic (elastic#101922)

7e2ba69

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks

kibanamachine mentioned this pull request Jun 22, 2021

[7.13] [DOCS] Updating Elastic Security Overview topic (#101922) #103005

Merged

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jun 22, 2021

[DOCS] Updating Elastic Security Overview topic (elastic#101922)

6c3126b

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks

kibanamachine mentioned this pull request Jun 22, 2021

[7.x] [DOCS] Updating Elastic Security Overview topic (#101922) #103006

Merged

kibanamachine removed the backport missing Added to PRs automatically when the are determined to be missing a backport. label Jun 22, 2021

jmikell821 mentioned this pull request Jun 23, 2021

[DOCS] Security Overview #103151

Merged

jmikell821 mentioned this pull request Jul 6, 2021

[DOCS] Elastic Sec Overview (Fixing Image) #104529

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[DOCS] Updating Elastic Security Overview topic #101922

[DOCS] Updating Elastic Security Overview topic #101922

jmikell821 commented Jun 10, 2021 •

edited

Loading

elasticmachine commented Jun 10, 2021

nastasha-solomon Jun 10, 2021

lcawl Jun 10, 2021

nastasha-solomon Jun 10, 2021

nastasha-solomon Jun 10, 2021

nastasha-solomon left a comment

lcawl Jun 10, 2021

lcawl Jun 10, 2021

KOTungseth left a comment

kibanamachine commented Jun 18, 2021

kibanamachine commented Jun 21, 2021

kibanamachine commented Jun 22, 2021

kibanamachine commented Jun 22, 2021

	{es-sec-endpoint} is installed on your hosts, you can add malware exceptions
	{endpoint-sec} is installed on your hosts, you can add malware exceptions

[DOCS] Updating Elastic Security Overview topic #101922

[DOCS] Updating Elastic Security Overview topic #101922

Conversation

jmikell821 commented Jun 10, 2021 • edited Loading

elasticmachine commented Jun 10, 2021

nastasha-solomon Jun 10, 2021

Choose a reason for hiding this comment

lcawl Jun 10, 2021

Choose a reason for hiding this comment

nastasha-solomon Jun 10, 2021

Choose a reason for hiding this comment

nastasha-solomon Jun 10, 2021

Choose a reason for hiding this comment

nastasha-solomon left a comment

Choose a reason for hiding this comment

lcawl Jun 10, 2021

Choose a reason for hiding this comment

lcawl Jun 10, 2021

Choose a reason for hiding this comment

KOTungseth left a comment

Choose a reason for hiding this comment

kibanamachine commented Jun 18, 2021

kibanamachine commented Jun 21, 2021

kibanamachine commented Jun 22, 2021

kibanamachine commented Jun 22, 2021

💚 Backport successful

jmikell821 commented Jun 10, 2021 •

edited

Loading