# Adding Tags to Elastic Endpoint Security Prebuilt rule

**URL:** https://discuss.elastic.co/t/adding-tags-to-elastic-endpoint-security-prebuilt-rule/388799
**Category:** Elastic Security
**Created:** [July 26, 2026, 3:50pm UTC](https://discuss.elastic.co/t/adding-tags-to-elastic-endpoint-security-prebuilt-rule/388799 "2026-07-26T15:50:22Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Harry123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harry123/32/144861_2.png) [@Harry123](https://discuss.elastic.co/u/Harry123)
#### Post date: [July 26, 2026, 3:50pm UTC](https://discuss.elastic.co/t/adding-tags-to-elastic-endpoint-security-prebuilt-rule/388799/1 "2026-07-26T15:50:22Z")

</div>

I have a question regarding elastic's endpoint security rule which has sub rules in it when you enable it. Like for example the malware detection alert. I want to put a tag on one of its sub rule but in the rules I cannot find them and have the option to put the tag on the main elastic endpoint security rule which will affect all rules. Need help to place a tag on a specific endpoint rule.