# Bulk alerting configuration

**URL:** <https://discuss.elastic.co/t/bulk-alerting-configuration/327511>\
**Category:** SIEM\
**Created:** [March 13, 2023, 3:24am UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511 "2023-03-13T03:24:47Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![rossw](https://avatars.discourse-cdn.com/v4/letter/r/ecb155/32.png) [@rossw](https://discuss.elastic.co/u/rossw)\
**Post date:** [March 13, 2023, 3:24am UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/1 "2023-03-13T03:24:47Z")

</div>

Afternoon,  
We are using the alerting functionality inside the Elastic Security toolset, and we have turned on about 100-odd rules. We have created email and webhook integrations and have started to tune the data being sent from these integrations to the rules...BUT  
Do we REALLY have to configure a separate integration screen for every single one of the rules that we have turned on? Is there some way to streamline this process?

Thanks

---

<div class="post-metadata">

**Author:** ![Tre\_Seymour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tre_seymour/32/46507_2.png) [@Tre\_Seymour](https://discuss.elastic.co/u/Tre_Seymour)\
**Post date:** [March 31, 2023, 12:02pm UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/2 "2023-03-31T12:02:28Z")

</div>

Hello there @rossw  
Before we get too far, what version of Elastic and Kibana are you running?

---

<div class="post-metadata">

**Author:** ![rossw](https://avatars.discourse-cdn.com/v4/letter/r/ecb155/32.png) [@rossw](https://discuss.elastic.co/u/rossw)\
**Post date:** [April 2, 2023, 8:46pm UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/3 "2023-04-02T20:46:47Z")

</div>

Morning

We are running 8.6.3

---

<div class="post-metadata">

**Author:** ![Tre\_Seymour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tre_seymour/32/46507_2.png) [@Tre\_Seymour](https://discuss.elastic.co/u/Tre_Seymour)\
**Post date:** [April 3, 2023, 11:49am UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/4 "2023-04-03T11:49:05Z")

</div>

Ok, I've reached out to some of my colleagues working in that area of Kibana. I'll let you know what I learn as soon as possible Ross.

---

<div class="post-metadata">

**Author:** ![georgii](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/georgii/32/78076_2.png) [@georgii](https://discuss.elastic.co/u/georgii)\
**Post date:** [April 3, 2023, 4:48pm UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/5 "2023-04-03T16:48:49Z")

</div>

Hey @rossw, I believe that by "email and webhook integrations" you mean `Email` and `Webhook` connectors that can be used in Elastic Security to [set up alert notification actions](https://www.elastic.co/guide/en/security/current/rules-ui-create.html#rule-notifications) for rules? Please correct me if I misunderstood what you're trying to achieve.

Starting from 8.5.0 you can add and overwrite notification actions in bulk, i.e. apply it to multiple rules simultaneously. You can find more info in [this PR](https://github.com/elastic/kibana/pull/138900) and [this doc](https://www.elastic.co/guide/en/security/current/rules-ui-management.html#edit-rules-settings). Also, here's some screenshots:

 ![Screenshot 2023-04-03 at 18.37.16](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f3f504380bb34f4da5014948fecba4e9a2967e18.jpeg)

 ![Screenshot 2023-04-03 at 18.38.18](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3f3bf74794cf4aa1b47f26d2d9ccee2271f546f6.jpeg)

---

<div class="post-metadata">

**Author:** ![rossw](https://avatars.discourse-cdn.com/v4/letter/r/ecb155/32.png) [@rossw](https://discuss.elastic.co/u/rossw)\
**Post date:** [April 11, 2023, 9:13pm UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/6 "2023-04-11T21:13:48Z")

</div>

Many thanks for this information – I had not noticed the change in the drop down menus.

Ross

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 9, 2023, 9:14pm UTC](https://discuss.elastic.co/t/bulk-alerting-configuration/327511/7 "2023-05-09T21:14:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.