mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 17:59:23 -04:00
d282c328f9
# Backport This will backport the following commits from `main` to `8.x`: - [[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)](https://github.com/elastic/kibana/pull/194080) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Lisa Cawley","email":"lcawley@elastic.co"},"sourceCommit":{"committedDate":"2024-09-27T16:45:44Z","message":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)","sha":"539ad61d377f8982f3358b1a753be45408c4998c","branchLabelMapping":{"^v9.0.0$":"main","^v8.16.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Alerting","release_note:skip","v9.0.0","docs","v8.16.0","backport:version"],"title":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples","number":194080,"url":"https://github.com/elastic/kibana/pull/194080","mergeCommit":{"message":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)","sha":"539ad61d377f8982f3358b1a753be45408c4998c"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/194080","number":194080,"mergeCommit":{"message":"[OpenAPI][ResponseOps] Edit descriptions for alerting rule API examples (#194080)","sha":"539ad61d377f8982f3358b1a753be45408c4998c"}},{"branch":"8.x","label":"v8.16.0","branchLabelMappingKey":"^v8.16.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Lisa Cawley <lcawley@elastic.co>
20 lines
No EOL
642 B
YAML
20 lines
No EOL
642 B
YAML
summary: Tracking containment rule
|
|
description: >
|
|
Create a tracking containment rule that checks when an entity is contained or no longer contained within a boundary.
|
|
value:
|
|
consumer: alerts
|
|
name: my tracking rule
|
|
params:
|
|
index: kibana_sample_data_logs
|
|
dateField": '@timestamp'
|
|
geoField: geo.coordinates
|
|
entity: agent.keyword
|
|
boundaryType: entireIndex
|
|
boundaryIndexTitle: boundary*
|
|
boundaryGeoField: location
|
|
boundaryNameField: name
|
|
indexId: 90943e30-9a47-11e8-b64d-95841ca0b247
|
|
boundaryIndexId: 0cd90abf-abe7-44c7-909a-f621bbbcfefc
|
|
rule_type_id: .geo-containment
|
|
schedule:
|
|
interval: 1h |