Default alert action?

Is there a way to set a default action in Elastic Siem? Manually setting up an action on 300+ rules is pretty raw!

Hey there @hilt86! :wave: While there isn't currently a way to set a default action on a selection of rules, we are looking into ways to make this a bit less cumbersome, whether that be bulk editing of Rules, or a default action that is applied to all Rules as you mention. I've created this kibana issue for tracking -- if you could stop by and :+1: it and add a bit about your use case that will help us prioritize these enhancements. :slightly_smiling_face:

We're looking to enhance the overall Rule Management experience, but in the meantime, using the API is probably the best way to automate things here a bit.