Skip to content

[DOCS] Preview Queries for Custom Query Rule, Threshold Rule, and EQL Rule #253

@dontcallmesherryli

Description

@dontcallmesherryli

Description

A "preview" query component will be available for some of the rule types in 7.10: Custom Query Rule, Threshold Rule, and EQL Rule. Once a user writes a rule query, they may select a time range to try the rule out on, and get feedback on how noisy their rule will be based on the preview.

Acceptance Test Criteria

Documentation for the "preview query" function.

Notes

  • Add the "Team:Docs" label to new issues.
  • Be sure to add the version number label.
  • Be sure to add any necessary screenshots for clarity.
  • Include any conditions or caveats that may affect customers.

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions