Type of issue
Inaccurate
What documentation page is affected
https://www.elastic.co/docs/solutions/security/get-started/data-views-elastic-security
What happened?
This page states that "The Alerts page always shows data from .alerts-security.alerts-default".
However, elsewhere in the documentation it is stated that the Alerts page shows data from .alerts-security.alerts-<current-space>, which will only be .alerts-security.alerts-default if the user is in the Default Space.
Statements contradicting that the Alerts page will always show data from .alerts-security.alerts-default can be found in these other pages:
- "By default, alerts created by detection rules are stored in Elasticsearch indices under the .alerts-security.alerts-<space-name> index pattern" Spaces and Elastic Security
- "Elastic Security stores alerts that have been generated by detection rules in hidden Elasticsearch indices. The index pattern is .alerts-security.alerts-<space-id->" Alert schema
- "We recommend querying the .alerts-security.alerts-<space-id> index alias" Query alert indices
Additional info
No response
Type of issue
Inaccurate
What documentation page is affected
https://www.elastic.co/docs/solutions/security/get-started/data-views-elastic-security
What happened?
This page states that "The Alerts page always shows data from .alerts-security.alerts-default".
However, elsewhere in the documentation it is stated that the Alerts page shows data from
.alerts-security.alerts-<current-space>, which will only be.alerts-security.alerts-defaultif the user is in the Default Space.Statements contradicting that the Alerts page will always show data from
.alerts-security.alerts-defaultcan be found in these other pages:Additional info
No response