When creating a schedule snooze for elastic rules does it snooze based on the schedule or avoids snoozing during the schedule set?

Elastic Security
1

When creating a schedule snooze for elastic rules does it snooze based on the schedule or avoids snoozing during the schedule set?

2

Hi Mike,

When rule is snoozed the rule checks continue to run on a schedule but the alert will not trigger any actions. You can snooze for a specified period of time, indefinitely, or schedule single or recurring downtimes.

If I correctly got your question you have a snooze schedule having more than one item. Whenever one of these schedules is active the rule will be snoozed. For example there is a recurring schedule to snooze a rule on Saturday between 10pm - 12pm and on Monday between 11am-12am. If the current moment in time is Saturday 11:30am and rule produces some alerts no actions will be triggered.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.