Skip to content

[DOCS][ML UI][9.4] New space id filter available in Kibana advanced settings for all detection rules #261428

Closed
nastasha-solomon wants to merge 8 commits into
elastic:mainfrom
nastasha-solomon:issue-5270-detection-namespace-filter-kib
Closed

[DOCS][ML UI][9.4] New space id filter available in Kibana advanced settings for all detection rules #261428
nastasha-solomon wants to merge 8 commits into
elastic:mainfrom
nastasha-solomon:issue-5270-detection-namespace-filter-kib

Conversation

@nastasha-solomon
Copy link
Copy Markdown
Member

Summary

Fixes elastic/docs-content#5539 by adding docs for the securitySolution:includedDataStreamNamespacesForRuleExecution advanced setting.

Corresponding Security solution docs being added via elastic/docs-content#5539.

Preview

Kibana advanced settings | Change the space-specific setting | Security solution - TBC

Comment thread docs/reference/advanced-settings.md Outdated
@nastasha-solomon nastasha-solomon marked this pull request as ready for review April 9, 2026 20:38
@nastasha-solomon nastasha-solomon requested a review from a team as a code owner April 9, 2026 20:38
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/experience-docs (Team:Docs)

nastasha-solomon added a commit to elastic/docs-content that referenced this pull request Apr 9, 2026
…ed settings for all detection rules (#5539)

<!--
Thank you for contributing to the Elastic Docs! 🎉
Use this template to help us efficiently review your contribution.
-->

## Summary
<!--
Describe what your PR changes or improves.  
If your PR fixes an issue, link it here. If your PR does not fix an
issue, describe the reason you are making the change.
-->

Fixes #5270.

- Added docs for the
`securitySolution:includedDataStreamNamespacesForRuleExecution` advanced
setting.
- Added a new troubleshooting subsection for missing/unexpected alerts
if users suspect the namespace filter was excluding alerts.

Corresponding Kibana docs being added via
elastic/kibana#261428.

## Previews
- [Limit detection rules to specific data stream
namespaces](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/5539/solutions/security/get-started/configure-advanced-settings#included-data-stream-namespaces-rule-execution)
- [Troubleshoot namespace
filter](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/5539/troubleshoot/security/detection-rules)

## Generative AI disclosure
<!--
To help us ensure compliance with the Elastic open source and
documentation guidelines, please answer the following:
-->
1. Did you use a generative AI (GenAI) tool to assist in creating this
contribution?
- [x] Yes  
- [ ] No  
<!--
2. If you answered "Yes" to the previous question, please specify the
tool(s) and model(s) used (e.g., Google Gemini, OpenAI ChatGPT-4, etc.).

Tool(s) and model(s) used:
-->

Cursor + Claude
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 16, 2026

🔍 Preview links for changed docs

Copy link
Copy Markdown
Member

@alaudazzi alaudazzi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@nastasha-solomon
Copy link
Copy Markdown
Member Author

@florent-leborgne doc't this setting in #266247.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip This PR does not require backporting docs release_note:skip Skip the PR/issue when compiling release notes Team:Docs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants