From 470514bc2b231526f6c194bca3d06775d1216801 Mon Sep 17 00:00:00 2001 From: natasha-moore-elastic <137783811+natasha-moore-elastic@users.noreply.github.com> Date: Thu, 14 Nov 2024 16:07:58 +0000 Subject: [PATCH] Fixes style issue on Event filters page (#6162) --- docs/management/admin/event-filters.asciidoc | 6 +++--- docs/serverless/edr-manage/event-filters.asciidoc | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/management/admin/event-filters.asciidoc b/docs/management/admin/event-filters.asciidoc index 94a64c0e43..99dcf2b3f5 100644 --- a/docs/management/admin/event-filters.asciidoc +++ b/docs/management/admin/event-filters.asciidoc @@ -16,12 +16,12 @@ IMPORTANT: Since an event filter blocks an event from streaming to {es}, be cons By default, event filters are recognized globally across all hosts running {elastic-defend}. If you have a https://www.elastic.co/pricing[Platinum or Enterprise subscription], you can also assign an event filter to a specific {elastic-defend} integration policy, which would filter endpoint events from the hosts assigned to that policy. -Create event filters from the Hosts page or the Event filters page. +Create event filters from the **Hosts** page or the **Event filters** page. . Do one of the following: + -- -* To create an event filter from the Hosts page: +* To create an event filter from the **Hosts** page: .. Select the *Events* tab to view the Events table. + .. Find the event to filter, click the *More actions* menu (*...*), then select *Add Endpoint event filter*. @@ -29,7 +29,7 @@ Create event filters from the Hosts page or the Event filters page. TIP: Since you can only create filters for endpoint events, be sure to filter the Events table to display events generated by the {elastic-endpoint}. + For example, in the KQL search bar, enter the following query to find endpoint network events: `event.dataset : endpoint.events.network`. -* To create an event filter from the Event filters page: +* To create an event filter from the **Event filters** page: .. Cick *Add event filter*, which opens a flyout. -- + diff --git a/docs/serverless/edr-manage/event-filters.asciidoc b/docs/serverless/edr-manage/event-filters.asciidoc index f2154ae32c..587411f867 100644 --- a/docs/serverless/edr-manage/event-filters.asciidoc +++ b/docs/serverless/edr-manage/event-filters.asciidoc @@ -26,11 +26,11 @@ Since an event filter blocks an event from streaming to {es}, be conscious of ev By default, event filters are recognized globally across all hosts running {elastic-defend}. You can also assign an event filter to a specific {elastic-defend} integration policy, which would filter endpoint events from the hosts assigned to that policy. -Create event filters from the Hosts page or the Event filters page. +Create event filters from the **Hosts** page or the **Event filters** page. . Do one of the following: + -** To create an event filter from the Hosts page: +** To create an event filter from the **Hosts** page: + ... Select the **Events** tab to view the Events table. ... Find the event to filter, click the **More actions** menu (image:images/icons/boxesHorizontal.svg[More actions menu icon]), then select **Add Endpoint event filter**. @@ -40,7 +40,7 @@ Create event filters from the Hosts page or the Event filters page. Since you can only create filters for endpoint events, be sure to filter the Events table to display events generated by the {elastic-endpoint}. For example, in the KQL search bar, enter the following query to find endpoint network events: `event.dataset : endpoint.events.network`. ==== -** To create an event filter from the Event filters page: +** To create an event filter from the **Event filters** page: + ... Click **Add event filter**, which opens a flyout. +