Feature request - Security Rule exception autopopulate

Elastic Security
1

would it be possible to auto populate all the fields when create a rule exception with the data coming from the alert.
Then I can simply eliminate the fields that are not relevant.
This will hugely simplify the process of creating relevant exception.

thank you

2

Hey there @smzd :wave: -- thanks for the enhancement request! :slightly_smiling_face:

Looks like there's already a github issue for this one, so you can follow along with progress there.

I've added this thread as a +1 there so we can better plan these types of enhancements. Appreciate it!

Cheers!
Garrett

3

Thank you for the heads up!
so it is better to do the feature requests on the Github issue thread?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.