Skip to content

Commit d0f8339

Browse files
authored
Updates qRadar BB rules warning for Automatic Migration (#5207)
Fixes elastic/docs-content-internal/issues/771 The way QRadar BB rules are handled in automatic migration for 9.4 and serverless has improved vs. 9.3. This PR adds an applies switch to describe the behavior in each version ## Generative AI disclosure 1. Did you use a generative AI (GenAI) tool to assist in creating this contribution? - [ ] Yes - [x] No <!-- 2. If you answered "Yes" to the previous question, please specify the tool(s) and model(s) used (e.g., Google Gemini, OpenAI ChatGPT-4, etc.).
1 parent cb92ab3 commit d0f8339

File tree

1 file changed

+9
-4
lines changed

1 file changed

+9
-4
lines changed

solutions/security/get-started/automatic-migration.md

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -194,10 +194,15 @@ This section describes the **Translated dashboards** page's interface and the da
194194
:screenshot:
195195
::::
196196

197-
:::{admonition} Important warning for QRadar "BB" rules
198-
:applies_to: stack: preview =9.3
199-
In the technical preview of QRadar rule migration, QRadar Building Block rules can appear in QRadar migrations. You can identify them by their `BB:` prefix. You should not enable these rules, because they will generate noisy alerts. If you do enable them, we recommend you delete them.
200-
:::
197+
:::::{admonition} Important information for QRadar "BB" rules
198+
199+
- {applies_to}`stack: preview =9.3`
200+
QRadar Building Block rules can appear in QRadar migrations. You can identify them by their `BB:` prefix. You should not enable these rules, because they will generate noisy alerts. If you do enable them, we recommend you delete them.
201+
202+
- {applies_to}`serverless: preview`{applies_to}`stack: preview 9.4+`
203+
Building block rule logic is included automatically in translated rules. No action is required.
204+
205+
:::::
201206

202207
The table's fields are as follows:
203208

0 commit comments

Comments
 (0)