You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Docs update: Alert data is now available in detection rule actions at {{context.alerts}} as an array. This array contains each alert generated since the last time the action executed. Mustache templating can be used to iterate over all alerts in the array and capture information from each one. For example, {{#context.alerts}}Detection alert for user: {{user.name}}{{/context.alerts}} would create the string Detection alert for user: <user.name> for every alert in the array. Any alerts that don't have user.name will still generate the string but leave <user.name> blank.
The text was updated successfully, but these errors were encountered:
Issue: elastic/kibana#85488
Docs update: Alert data is now available in detection rule actions at {{context.alerts}} as an array. This array contains each alert generated since the last time the action executed. Mustache templating can be used to iterate over all alerts in the array and capture information from each one. For example,
{{#context.alerts}}Detection alert for user: {{user.name}}{{/context.alerts}}
would create the stringDetection alert for user: <user.name>
for every alert in the array. Any alerts that don't haveuser.name
will still generate the string but leave<user.name>
blank.The text was updated successfully, but these errors were encountered: