# Assign current user to acknowledged alert / Elastic Security

**URL:** https://discuss.elastic.co/t/assign-current-user-to-acknowledged-alert-elastic-security/334314
**Category:** SIEM
**Tags:** painless
**Created:** [May 25, 2023, 11:46am UTC](https://discuss.elastic.co/t/assign-current-user-to-acknowledged-alert-elastic-security/334314 "2023-05-25T11:46:15Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Mike\_S](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mike_s/32/118017_2.png) [@Mike\_S](https://discuss.elastic.co/u/Mike_S)
#### Post date: [May 25, 2023, 11:46am UTC](https://discuss.elastic.co/t/assign-current-user-to-acknowledged-alert-elastic-security/334314/1 "2023-05-25T11:46:16Z")

</div>

Hi,

Is it possible to set the current user that has acknowledged an alert to a new field using the painless / runtime scripts to set a value? I've read over some documentation for it but can't figure out how to pull the user doing the actions when something is acknowledged.

Trying to fully move over to this and this will be a requirement for us.

Thanks,  
Mike

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 22, 2023, 11:46am UTC](https://discuss.elastic.co/t/assign-current-user-to-acknowledged-alert-elastic-security/334314/2 "2023-06-22T11:46:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.