[DOCS][9.4 & Serverless] Docs for the new maxOpenCasesPerRuleRun advanced setting#263876
Closed
nastasha-solomon wants to merge 4 commits into
Closed
[DOCS][9.4 & Serverless] Docs for the new maxOpenCasesPerRuleRun advanced setting#263876nastasha-solomon wants to merge 4 commits into
maxOpenCasesPerRuleRun advanced setting#263876nastasha-solomon wants to merge 4 commits into
Conversation
nastasha-solomon
added
Team:Docs
release_note:skip
2 tasks
Contributor
|
Pinging @elastic/experience-docs (Team:Docs) |
Contributor
🔍 Preview links for changed docs |
Contributor
💚 Build Succeeded
|
Member
|
@nastasha-solomon these settings should now be documented in the corresponding yaml file. Can you move that new setting there? |
florent-leborgne
requested changes
Apr 27, 2026
Member
florent-leborgne
left a comment
florent-leborgne
left a comment
There was a problem hiding this comment.
settings are now handled through yaml files that are then included in the output .md files. This makes it easier to maintain for engineering as well as more easily automated in the future.
Member
Author
|
@florent-leborgne changes made in #266247. |
nastasha-solomon
added a commit
to elastic/docs-content
that referenced
this pull request
Apr 29, 2026
…(Cases alert action) (#5867) <!-- Thank you for contributing to the Elastic Docs! 🎉 Use this template to help us efficiently review your contribution. --> ## Summary <!-- Describe what your PR changes or improves. If your PR fixes an issue, link it here. If your PR does not fix an issue, describe the reason you are making the change. -->⚠️ Don't merge this doc PR until after elastic/kibana#264070 is merged⚠️ Fixes #5737 by adding a section for the new `maxOpenCasesPerRuleRun` advanced setting. [The section](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/5867/solutions/security/get-started/configure-advanced-settings#max-cases-cases-connector) covers the following: - What the setting controls (the maximum cases created per rule run) - The default value (20) and allowed range (1–1000) - Practical guidance for high-volume environments - A note that Attack Discovery keeps its own case-creation limit and is unaffected Corresponding Kibana PR: elastic/kibana#263876 ## Generative AI disclosure <!-- To help us ensure compliance with the Elastic open source and documentation guidelines, please answer the following: --> 1. Did you use a generative AI (GenAI) tool to assist in creating this contribution? - [x] Yes - [ ] No <!-- 2. If you answered "Yes" to the previous question, please specify the tool(s) and model(s) used (e.g., Google Gemini, OpenAI ChatGPT-4, etc.). Tool(s) and model(s) used: --> Cursor + Composer
nastasha-solomon
added a commit
that referenced
this pull request
May 8, 2026
…includedDataStreamNamespacesForRuleExecution` advanced settings to yaml file (#266247) ## Summary Adds the `cases:maxOpenCasesPerRuleRun` and `securitySolution:includedDataStreamNamespacesForRuleExecution` advanced settings to yaml file as per @florent-leborgne's [request](#263876 (review)). --------- Co-authored-by: Florent LB <florent.leborgne@elastic.co> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds docs for the new
maxOpenCasesPerRuleRunadvanced setting.Preview - Cases
Corresponding Security docs PR: elastic/docs-content#5867