b242765654
* Combining rule management stuff into single page * Cleaning up image widths and header sizes * Adding in placeholder pages * Adding in placeholder pages * Apply suggestions from code review Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> * PR and test fixes * Apply suggestions from code review Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> * PR fixes * PR fixes Co-authored-by: gchaps <33642766+gchaps@users.noreply.github.com> Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
39 lines
1.4 KiB
Plaintext
39 lines
1.4 KiB
Plaintext
[[rule-type-<RULE TYPE>]]
|
|
=== <RULE TYPE>
|
|
|
|
Include a short description of the rule type.
|
|
|
|
[float]
|
|
==== Create the rule
|
|
|
|
Fill in the <<defining-rules-general-details, rule details>>, then select *<RULE TYPE>*.
|
|
|
|
[float]
|
|
==== Define the conditions
|
|
|
|
Define properties to detect the condition.
|
|
|
|
////
|
|
Optional, include a screenshot
|
|
[role="screenshot"]
|
|
image::user/alerting/images/rule-types-<RULE TYPE>-conditions.png[Conditions for <RULE TYPE> rule type]
|
|
////
|
|
|
|
Condition1:: This is a condition the user must define.
|
|
Condition2:: This is another condition the user must define.
|
|
|
|
[float]
|
|
==== Add action variables
|
|
|
|
<<defining-rules-actions-details, Add an action>> to run when the rule condition is met. The following variables are specific to the <RULE TYPE> rule. You can also specify <<defining-rules-actions-variables, variables common to all rules>>.
|
|
|
|
`context.variableA`:: A short description of the context variable defined by the rule type.
|
|
`context.variableB`:: A short description of the context variable defined by the rule type with an example. Example: `this is what variableB outputs`.
|
|
|
|
////
|
|
Optional, include a step-by-step example for creating this rule
|
|
[float]
|
|
==== Example
|
|
|
|
In this section, you will use the {kib} <<add-sample-data, weblog sample dataset>> to setup and tune the conditions on an <RULE TYPE> rule. For this example, we want to detect when <DESCRIBE THE CONDITIONS>.
|
|
//// |