[DOCS] Updating Elastic Security Overview topic by jmikell821 · Pull Request #101922 · elastic/kibana

jmikell821 · 2021-06-10T16:39:09Z

Addresses #98829.

elasticmachine · 2021-06-10T16:39:11Z

Pinging @elastic/kibana-docs (Team:Docs)

nastasha-solomon · 2021-06-10T17:20:48Z

docs/siem/siem-ui.asciidoc

+
+* Data is shipped from your hosts to {es} via beat modules and the Elastic
+Endpoint Security agent integration:
+** {security-guide}/install-endpoint.html[{es-sec-endpoint}] - Elastic agent integration that


Only flagging because I'm not sure why the {es-sec-endpoint} attribute is showing up as {es-sec-endpoint} in this sentence instead of Endpoint Security.

I think it needs to be one of the ones listed here: https://github.com/elastic/docs/blob/6367efdfd6ebbb1787e289f5fee67ba870e14c28/shared/attributes.asciidoc#L210-L212

nastasha-solomon · 2021-06-10T17:23:32Z

docs/siem/siem-ui.asciidoc

+event is discovered, a detection alert is generated. External systems, such as
+Slack and email, can be used to send notifications when alerts are generated.
+You can create your own rules and make use of our {security-guide}/prebuilt-rules.html[prebuilt ones].
+*** {security-guide}/detections-ui-exceptions.html [Exceptions]: Reduce noise and the number of


Think the space between the topic link and the [Exceptions] might need to be removed for the text to show up as linked text.

nastasha-solomon · 2021-06-10T17:24:37Z

docs/siem/siem-ui.asciidoc

+** {security-guide}/cases-overview.html[Cases]: An internal system for opening, tracking, and sharing
+security issues directly in the Security app. Cases can be integrated with
+external ticketing systems.
+** {security-guide}/admin-page-ov.html[Administration]: View and manage hosts running {es-sec-endpoint}.


Flagging because this is showing up as {es-sec-endpoint} instead of Endpoint Security in the output.

nastasha-solomon

Overall, LGTM!

lcawl · 2021-06-10T17:36:05Z

docs/siem/siem-ui.asciidoc

+false positives. Exceptions are associated with rules and prevent alerts when
+an exception's conditions are met. *Value lists* contain source event
+values that can be used as part of an exception's conditions. When
+{es-sec-endpoint} is installed on your hosts, you can add malware exceptions


I think this is another one that needs to be changed to either "{endpoint-sec}", "{elastic-sec}", or "{elastic-endpoint}" depending on the correct product for this context:

Suggested change

{es-sec-endpoint} is installed on your hosts, you can add malware exceptions

{endpoint-sec} is installed on your hosts, you can add malware exceptions

lcawl · 2021-06-10T17:37:45Z

docs/siem/siem-ui.asciidoc

+[discrete]
+=== Compatibility with cold tier nodes
+
+Cold tier is a {ref}/data-tiers.html[data tier] that holds time series data that is accessed only occasionally. In {stack} version >=7.11.0, {es-sec} supports cold tier data for the following {es} indices:


In {stack} version >=7.11.0, {es-sec} supports ...

This is another attribute that doesn't seem to exist in https://github.com/elastic/docs/blob/master/shared/attributes.asciidoc at the moment. It either needs to be added there or a different existing attribute chosen from that file.

KOTungseth

One small comment, but otherwise, LGTM.

docs/siem/siem-ui.asciidoc

…egrations-to-global-search * 'master' of github.com:elastic/kibana: (46 commits) [Lens] Add some more documentation for dynamic coloring (elastic#101369) hide not searchable results when no term (elastic#102401) [Lens] Fix Formula functional test with multiple suggestions (elastic#102378) Fix trusted apps modified by field displayed as a date field (elastic#102377) [Lens] Docs for time shift (elastic#102048) update readme of logs-metrics-ui (elastic#101968) Refactor observability plugin breadcrumbs (elastic#102290) [Index Patterns] Move rollup config to index pattern management v2 (elastic#102285) [Security Solution][Endpoint] Isolate Action should only be available to Platinum+ licenses (elastic#102374) [build] Updates Ironbank templates (elastic#102407) Update security best practices document (elastic#100814) [Enterprise Search] Set up initial KibanaPageTemplate (elastic#102170) [Reporting/Docs] Add section to troubleshooting guide to explain the StatusCodeError logs (elastic#102278) [DOCS] Updating Elastic Security Overview topic (elastic#101922) [Uptime] refactor Synthetics Integration package UI (elastic#102080) [Task Manager] Log at different levels based on the state (elastic#101751) [APM] Fixing time comparison types (elastic#101423) [RAC] Update alert documents in lifecycle rule type helper (elastic#101598) [ML] Functional tests - fix and re-activate alerting flyout test (elastic#102368) [Reporting] remove unused reference to path.data config (elastic#102267) ... # Conflicts: # x-pack/plugins/fleet/kibana.json

kibanamachine · 2021-06-18T19:48:16Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

kibanamachine · 2021-06-21T19:58:15Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

kibanamachine · 2021-06-22T20:08:15Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create backports run node scripts/backport --pr 101922 or prevent reminders by adding the backport:skip label.

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks

kibanamachine · 2021-06-22T20:26:30Z

💚 Backport successful

Status	Branch	Result
✅	7.13
✅	7.x

The backport PRs will be merged automatically after passing CI.

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks Co-authored-by: Janeen Mikell-Straughn <57149392+jmikell821@users.noreply.github.com>

updating overview topic for Kibana

ba8d840

jmikell821 added Team:Docs release_note:skip Skip the PR/issue when compiling release notes v7.13.0 labels Jun 10, 2021

jmikell821 requested review from lcawl and nastasha-solomon June 10, 2021 16:39

jmikell821 requested a review from KOTungseth June 10, 2021 16:50

nastasha-solomon reviewed Jun 10, 2021

View reviewed changes

nastasha-solomon approved these changes Jun 10, 2021

View reviewed changes

lcawl reviewed Jun 10, 2021

View reviewed changes

KOTungseth approved these changes Jun 10, 2021

View reviewed changes

docs/siem/siem-ui.asciidoc Outdated Show resolved Hide resolved

jmikell821 added 3 commits June 10, 2021 13:57

formatting fixes

916b26a

small formatting tweaks

fc264f3

small formatting tweaks

febc63f

jmikell821 merged commit dcb5a67 into elastic:master Jun 16, 2021

kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Jun 18, 2021

jmikell821 added v7.14.0 v8.0.0 auto-backport Deprecated - use backport:version if exact versions are needed labels Jun 22, 2021

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jun 22, 2021

[DOCS] Updating Elastic Security Overview topic (elastic#101922)

7e2ba69

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks

kibanamachine mentioned this pull request Jun 22, 2021

[7.13] [DOCS] Updating Elastic Security Overview topic (#101922) #103005

Merged

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Jun 22, 2021

[DOCS] Updating Elastic Security Overview topic (elastic#101922)

6c3126b

* updating overview topic for Kibana * formatting fixes * small formatting tweaks * small formatting tweaks

kibanamachine mentioned this pull request Jun 22, 2021

[7.x] [DOCS] Updating Elastic Security Overview topic (#101922) #103006

Merged

kibanamachine removed the backport missing Added to PRs automatically when the are determined to be missing a backport. label Jun 22, 2021

jmikell821 mentioned this pull request Jun 23, 2021

[DOCS] Security Overview #103151

Merged

jmikell821 mentioned this pull request Jul 6, 2021

[DOCS] Elastic Sec Overview (Fixing Image) #104529

Merged

	{es-sec-endpoint} is installed on your hosts, you can add malware exceptions
	{endpoint-sec} is installed on your hosts, you can add malware exceptions

Conversation

jmikell821 commented Jun 10, 2021 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

elasticmachine commented Jun 10, 2021

Uh oh!

nastasha-solomon Jun 10, 2021

Choose a reason for hiding this comment

Uh oh!

lcawl Jun 10, 2021

Choose a reason for hiding this comment

Uh oh!

nastasha-solomon Jun 10, 2021

Choose a reason for hiding this comment

Uh oh!

nastasha-solomon Jun 10, 2021

Choose a reason for hiding this comment

Uh oh!

nastasha-solomon left a comment

Choose a reason for hiding this comment

Uh oh!

lcawl Jun 10, 2021

Choose a reason for hiding this comment

Uh oh!

lcawl Jun 10, 2021

Choose a reason for hiding this comment

Uh oh!

KOTungseth left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

kibanamachine commented Jun 18, 2021

Uh oh!

kibanamachine commented Jun 21, 2021

Uh oh!

kibanamachine commented Jun 22, 2021

Uh oh!

kibanamachine commented Jun 22, 2021

💚 Backport successful

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

jmikell821 commented Jun 10, 2021 •

edited

Loading