What documentation page is affected
https://www.elastic.co/docs/solutions/security/detect-and-alert/add-manage-exceptions
What change would you like to see?
See elastic/kibana#147093 (comment) .
Document the behavior that when creating exception items in the UI and you use the OR operator, they get created as separate exception items.
Additional info
No response
What documentation page is affected
https://www.elastic.co/docs/solutions/security/detect-and-alert/add-manage-exceptions
What change would you like to see?
See elastic/kibana#147093 (comment) .
Document the behavior that when creating exception items in the UI and you use the
ORoperator, they get created as separate exception items.Additional info
No response