Skip to content

Moves Hosts, Users, and Network pages to Entity Analytics section#5319

Open
benironside wants to merge 3 commits intomainfrom
4355-explore-rename
Open

Moves Hosts, Users, and Network pages to Entity Analytics section#5319
benironside wants to merge 3 commits intomainfrom
4355-explore-rename

Conversation

@benironside
Copy link
Contributor

@benironside benironside commented Feb 27, 2026

Fixes #4355.

  • Renames the "Advanced entity analytics" section within the security solution docs to "Entity analytics", which better matches the product IA.
  • Deletes the "Explore" section within security solution docs and moves its contents to the Entity analytics section. Deletes the landing page for this section, which was a stub.
  • Makes a minor update to the entity analytics landing page to reference the new pages in its section.
  • Updates links and adds redirects.

Generative AI disclosure

  1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?
  • Yes
  • No
  1. If you answered "Yes" to the previous question, please specify the tool(s) and model(s) used

Claude 4.6 Opus High via Cursor

…ges into 'Entity analytics' section. Updated links and navigation titles for clarity and consistency.
@github-actions
Copy link
Contributor

github-actions bot commented Feb 27, 2026

Vale Linting Results

Summary: 1 warning, 1 suggestion found

⚠️ Warnings (1)
File Line Rule Message
solutions/security/advanced-entity-analytics/configure-network-map-data.md 117 Elastic.Spelling 'adata' is a possible misspelling.
💡 Suggestions (1)
File Line Rule Message
solutions/security/advanced-entity-analytics/network-page.md 16 Elastic.Wordiness Consider using 'drag' instead of 'drag and drop'.

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

Copy link
Contributor

@kilfoyle kilfoyle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM for the tiny little admin-docs part. 🦖

Copy link
Contributor

@nastasha-solomon nastasha-solomon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice!

Copy link
Contributor

@natasha-moore-elastic natasha-moore-elastic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for taking this, just a few small updates needed and then should be good to go 🙏
Also, we might need to update the link for the networkMap entry in the doc link service file, since the Network page in Kibana links to the Configure network map data docs.

- [Privileged user monitoring](/solutions/security/advanced-entity-analytics/monitor-privileged-user-activitites.md): Set up your privileged users and monitor their activities to identify suspicious behavior.


### Explore [_explore]
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The solutions/security/get-started/elastic-security-ui.md page only needs the link updates.
We shouldn't remove the ### Explore [_explore] section because in the UI, the Users, Hosts, and Network pages are still inside the Explore section.

* {applies_to}`serverless: ga` {applies_to}`stack: preview 9.1-9.2, ga 9.3+`
[](/solutions/security/advanced-entity-analytics/privileged-user-monitoring.md)

To learn about how entity analytics can help you manage your hosts, users, and network activity, refer to:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
To learn about how entity analytics can help you manage your hosts, users, and network activity, refer to:
To learn about how you can explore your host, user, and network data, refer to:

| **[Attack Discovery](/solutions/security/ai/attack-discovery.md) (AI-powered alert correlation)** | ✅ | ❌ | ✅ |
| **[Automatic Import](/solutions/security/get-started/automatic-import.md) (AI-powered custom integrations)** | ✅ | ❌ | ❌ |
| **[Entity analytics / UEBA](/solutions/security/advanced-entity-analytics.md)** | ✅ | ❌ | ❌ |
| **[Entity analytics](/solutions/security/advanced-entity-analytics.md)** | ✅ | ❌ | ❌ |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
| **[Entity analytics](/solutions/security/advanced-entity-analytics.md)** ||||
| **[Entity analytics / UEBA](/solutions/security/advanced-entity-analytics.md)** ||||

We can keep this, it stands for User and Entity Behavior Analytics and refers to the features in Advanced behavioral detections.

Comment on lines +730 to +735
- file: security/advanced-entity-analytics/hosts-page.md
- file: security/advanced-entity-analytics/network-page.md
children:
- file: security/advanced-entity-analytics/configure-network-map-data.md
- file: security/advanced-entity-analytics/configure-dns-histogram.md
- file: security/advanced-entity-analytics/users-page.md
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we move the Hosts, Network, and Users pages to go at the end of the Entity analytics section (after Privileged user monitoring), to match the order they're listed in on the landing page?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Internal]: Rename the Security > Explore section

4 participants