Skip to content

Conversation

@jmikell821
Copy link
Collaborator

Adds files.

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

Elastic Vale

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('been added').

* **Total connectors**: Total number of connectors that have been added to the case


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('was created').

* **Case created**: Date and time that the case was created


[Elastic Vale] reported by reviewdog 🐶
Elastic.Wordiness:Consider using 'because' instead of 'since'.

* **Open duration**: Time elapsed since the case was created


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('was created').

* **Open duration**: Time elapsed since the case was created


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('was created').

* **Duration from creation to close**: Time elapsed from when the case was created to when it was closed


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('was closed').

* **Duration from creation to close**: Time elapsed from when the case was created to when it was closed


[Elastic Vale] reported by reviewdog 🐶
Elastic.WordChoice:Consider using 'remove' instead of 'delete', unless the term is in the UI.

To edit, delete, or quote a comment, select the appropriate option from the **More actions** menu (****).


[Elastic Vale] reported by reviewdog 🐶
Elastic.Acronyms:'MIME' has no definition.

There is a 10 MiB size limit for images. For all other MIME types, the limit is 100 MiB.


[Elastic Vale] reported by reviewdog 🐶
Elastic.WordChoice:Consider using 'remove' instead of 'delete', unless the term is in the UI.

To download or delete the file, or copy the file hash to your clipboard, open the **Actions** menu (****). The available hash functions are MD5, SHA-1, and SHA-256.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Acronyms:'SHA' has no definition.

To download or delete the file, or copy the file hash to your clipboard, open the **Actions** menu (****). The available hash functions are MD5, SHA-1, and SHA-256.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Acronyms:'SHA' has no definition.

To download or delete the file, or copy the file hash to your clipboard, open the **Actions** menu (****). The available hash functions are MD5, SHA-1, and SHA-256.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('is added').

When you add a file, a comment is added to the case activity log. To view an image, click its name in the activity or file list.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('being provided').

This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('is activated').

2. Choose if you want to keep the **Update panel on Security** activated. This option is activated by default and automatically adds the visualization to your Visualize Library.


[Elastic Vale] reported by reviewdog 🐶
Elastic.FutureTense:'will appear' might be in future tense. Write in the present tense to describe the state of the product as it is now.

5. Click **Preview** to show how the visualization will appear in the case comment.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('been added').

After a visualization has been added to a case, you can modify or interact with it by clicking the **Open Visualization** option in the case’s comment menu.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('be exported').

Cases can be [exported](/solutions/security/investigate/open-manage-cases.md#cases-export) and [imported](/solutions/security/investigate/open-manage-cases.md#cases-import) as saved objects using the {{kib}} [Saved Objects](/explore-analyze/find-and-organize/saved-objects.md) UI.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('being imported').

Before importing Lens visualizations, Timelines, or alerts into a space, ensure their data is present. Without it, they won’t work after being imported.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('is exported').

Use the **Export** option to move cases between different {{elastic-sec}} instances. When you export a case, the following data is exported to a newline-delimited JSON (`.ndjson`) file:


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('are exported').

Keep the **Include related objects** option enabled to ensure connectors are exported too.


[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('be prompted').

* If the imported case had connectors attached to it, you’ll be prompted to re-authenticate the connectors. To do so, click **Go to connectors** on the **Import saved objects** flyout and complete the necessary steps. You can also access connectors from the **{{connectors-ui}}** page (find **{{connectors-ui}}** in the navigation menu or by using the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md)).


To open the **Data Set Quality** management page, find it in the navigation menu or by using the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).

By default, the page only shows log data sets. To see other data set types, select them from the **Type** menu.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.WordChoice:Consider using 'refer to (if it's a document), view (if it's a UI element)' instead of 'see', unless the term is in the UI.


## Monitor data sets

The quality of your data sets is based on the percentage of degraded documents in each data set. A degraded document in a data set contains the [`_ignored`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) property because one or more of its fields were ignored during indexing. Fields are ignored for a variety of reasons. For example, when the [`ignore_malformed`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) parameter is set to true, if a document field contains the wrong data type, the malformed field is ignored and the rest of the document is indexed.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('is based').


## Monitor data sets

The quality of your data sets is based on the percentage of degraded documents in each data set. A degraded document in a data set contains the [`_ignored`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) property because one or more of its fields were ignored during indexing. Fields are ignored for a variety of reasons. For example, when the [`ignore_malformed`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) parameter is set to true, if a document field contains the wrong data type, the malformed field is ignored and the rest of the document is indexed.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('were ignored').


## Monitor data sets

The quality of your data sets is based on the percentage of degraded documents in each data set. A degraded document in a data set contains the [`_ignored`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) property because one or more of its fields were ignored during indexing. Fields are ignored for a variety of reasons. For example, when the [`ignore_malformed`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) parameter is set to true, if a document field contains the wrong data type, the malformed field is ignored and the rest of the document is indexed.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('are ignored').


## Monitor data sets

The quality of your data sets is based on the percentage of degraded documents in each data set. A degraded document in a data set contains the [`_ignored`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) property because one or more of its fields were ignored during indexing. Fields are ignored for a variety of reasons. For example, when the [`ignore_malformed`](elasticsearch://reference/elasticsearch/mapping-reference/mapping-ignored-field.md) parameter is set to true, if a document field contains the wrong data type, the malformed field is ignored and the rest of the document is indexed.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('is set').

1. Create a preconfigured email connector.

::::{note}
At this time, email notifications support only [preconfigured email connectors](kibana://reference/connectors-kibana/pre-configured-connectors.md), which are defined in the [`kibana.yml`](/deploy-manage/stack-settings.md) file.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('are defined').


## Manage existing cases [cases-ui-manage]

From the Cases page, you can search existing cases and filter them by attributes such as assignees, categories, severity, status, and tags. You can also select multiple cases and use bulk actions to delete cases or change their attributes. General case metrics, including how long it takes to close cases, are provided above the table.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.WordChoice:Consider using 'remove' instead of 'delete', unless the term is in the UI.


## Manage existing cases [cases-ui-manage]

From the Cases page, you can search existing cases and filter them by attributes such as assignees, categories, severity, status, and tags. You can also select multiple cases and use bulk actions to delete cases or change their attributes. General case metrics, including how long it takes to close cases, are provided above the table.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('are provided').

Click on an existing case to access its summary. The case summary, located under the case title, contains metrics that summarize alert information and response times. These metrics update when you attach additional unique alerts to the case, add connectors, or modify the case’s status:

* **Total alerts**: Total number of unique alerts attached to the case
* **Associated users**: Total number of unique users that are represented in the attached alerts

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('are represented').


* **Total alerts**: Total number of unique alerts attached to the case
* **Associated users**: Total number of unique users that are represented in the attached alerts
* **Associated hosts**: Total number of unique hosts that are represented in the attached alerts

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Elastic Vale] reported by reviewdog 🐶
Elastic.Passive:In general, use active voice instead of passive voice ('are represented').

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants