# Elastic prebuilt rules not executed

**URL:** <https://discuss.elastic.co/t/elastic-prebuilt-rules-not-executed/330816>\
**Category:** Elastic Security\
**Created:** [April 26, 2023, 10:00am UTC](https://discuss.elastic.co/t/elastic-prebuilt-rules-not-executed/330816 "2023-04-26T10:00:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![amatol1515](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amatol1515/32/101590_2.png) [@amatol1515](https://discuss.elastic.co/u/amatol1515)\
**Post date:** [April 26, 2023, 10:00am UTC](https://discuss.elastic.co/t/elastic-prebuilt-rules-not-executed/330816/1 "2023-04-26T10:00:24Z")

</div>

Hi

Some of prebuilt rules not executed e.q.

 ![Screenshot 2023-04-26 at 12.57.18](https://us1.discourse-cdn.com/elastic/original/3X/1/d/1dccd9835eec7aec5e138a3c0ada7d3ce06429d5.png)

Execution result screen

 ![Screenshot 2023-04-26 at 12.58.05](https://us1.discourse-cdn.com/elastic/original/3X/4/9/490b45fe50ad3840333c101196daf9bb4e5999da.png)

But when I duplicate this rules it works

Execution results of Duplicated rule

 ![Screenshot 2023-04-26 at 12.59.55](https://us1.discourse-cdn.com/elastic/original/3X/3/9/39cedf795a0f9b2d5993d8dde531dcb46d76c282.png)

---

<div class="post-metadata">

**Author:** ![Marshall\_Main](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marshall_main/32/77883_2.png) [@Marshall\_Main](https://discuss.elastic.co/u/Marshall_Main)\
**Post date:** [May 12, 2023, 4:03pm UTC](https://discuss.elastic.co/t/elastic-prebuilt-rules-not-executed/330816/2 "2023-05-12T16:03:55Z")

</div>

Hi @amatol1515, prebuilt rules not executing despite being enabled is definitely not the expected behavior. Can you try disabling and re-enabling the rule to see if that fixes the issue?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 9, 2023, 4:04pm UTC](https://discuss.elastic.co/t/elastic-prebuilt-rules-not-executed/330816/3 "2023-06-09T16:04:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.