From 747979c9ef5b564918e69732982a3eef23a8165c Mon Sep 17 00:00:00 2001 From: Juliana Fajardini Date: Wed, 7 Oct 2026 16:35:40 -0300 Subject: [PATCH] docs: note about no config action support in fw mode For Threat Detection rules Part of Ticket: #9041 (cherry picked from commit 98e205be0b4fd21c6259bc446fbc87879901a0cc) --- doc/userguide/rules/config.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/userguide/rules/config.rst b/doc/userguide/rules/config.rst index 5e260a17f2..e85a2fc3bd 100644 --- a/doc/userguide/rules/config.rst +++ b/doc/userguide/rules/config.rst @@ -55,3 +55,8 @@ Action Config rules can, but don't have to, use the `config` rule action. The `config` rule action won't generate an alert when the rule matches, but the rule actions will still be applied. It is equivalent to `alert ... (noalert; ...)`. + +.. note:: + + Currently, the ``config`` action is not supported in Firewall mode, + for Threat Detection rules.