Open
Description
Description
Exceptions with wildcards are tricky to implement for users because the users' expectations do not always match up with the result of the exception because of the type of data mapped to the field they want to "except" on. I believe adding clearer and more examples of what will and what will not match with a given wildcard exception would be beneficial for customers and reduce the number of support cases we receive.
Related links / assets
Related SDH's:
https://github.com/elastic/sdh-security-team/issues/981
https://github.com/elastic/sdh-security-team/issues/887
Which documentation set needs improvement?
ESS and serverless
Software version
8.4
Introduced in this PR: elastic/kibana#136147
Collaborators
PM: @approksiu
Designer:
Developer:
Others (if applicable): @yctercero
Timeline / deliverables
I think within the 8.15 release would be preferable.