diff --git a/docs/detections/detections-req.asciidoc b/docs/detections/detections-req.asciidoc index e70f02a821..a10d76f76d 100644 --- a/docs/detections/detections-req.asciidoc +++ b/docs/detections/detections-req.asciidoc @@ -58,7 +58,7 @@ The following table describes the required privileges to access the Detections f a|`manage`, `write`, `read`, and `view_index_metadata` for these system indices and data streams, where `` is the space name: * `.alerts-security.alerts-` -* `.siem-signals-` ^1^ +* `.siem-signals-*` ^1^ * `.lists-` * `.items-` @@ -73,10 +73,10 @@ a|`manage`, `write`, `read`, and `view_index_metadata` for these system indices |`manage` a|`manage`, `write`, `read`, and `view_index_metadata` for these system indices and data streams: -* `.alerts-security.alerts-` -* `.siem-signals-` ^1^ -* `.lists-` -* `.items-` +* `.alerts-security.alerts-*` +* `.siem-signals-*` +* `.lists-*` +* `.items-*` ^1^ *NOTE*: If you're upgrading to {stack} 8.0.0 or later, users should have privileges for the `.alerts-security.alerts-` AND `.siem-signals-` indices. If you're newly installing the {stack}, then users do not need privileges for the `.siem-signals-` index.