# Elastic Security rule with Index action **URL:** \ **Category:** Elastic Security\ **Tags:** detection-rules\ **Created:** [July 17, 2023, 7:28am UTC](https://discuss.elastic.co/t/elastic-security-rule-with-index-action/338508 "2023-07-17T07:28:13Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![alextd](https://avatars.discourse-cdn.com/v4/letter/a/e95f7d/32.png) [@alextd](https://discuss.elastic.co/u/alextd)\ **Post date:** [July 17, 2023, 7:28am UTC](https://discuss.elastic.co/t/elastic-security-rule-with-index-action/338508/1 "2023-07-17T07:28:13Z")
Hello All, I'm new work with Elastic Security. I'm using the Elastic Security basic version and I want to create the detection rule with Index action. My situation is, I created a rule to detect any connect malicious IP. This rule seems matched but I'm stuck with the Index action. I want to write the data into an index "test-ioc-match" when the rule matched. Does anyone have an example indẽ action of this situation? Thank You, alextd ---
**Author:** ![alextd](https://avatars.discourse-cdn.com/v4/letter/a/e95f7d/32.png) [@alextd](https://discuss.elastic.co/u/alextd)\ **Post date:** [July 17, 2023, 10:32am UTC](https://discuss.elastic.co/t/elastic-security-rule-with-index-action/338508/2 "2023-07-17T10:32:32Z")
This is my configuration and the result. It seems cannot get the value of the variables. [index-action|690x416](https://discuss.elastic.co/uploads/short-url/rQtx7KcaF5ZxJkkHYyNYJTw9EBM.png) [result|690x228](https://discuss.elastic.co/uploads/short-url/eSZqfCZDGHmES8NIKSI1pzcXtCW.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 14, 2023, 10:32am UTC](https://discuss.elastic.co/t/elastic-security-rule-with-index-action/338508/3 "2023-08-14T10:32:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.