[Security Solution] Refine tooltip message for Related Integrations
#153228 opened on Mar 15, 2023
Description
Summary
The current tooltip message for related integrations is causing confusion among users. The message displayed is:
"Install and configure one or more of the below integrations to ingest the necessary data for this detection rule."
However, this message might lead users to believe that installing any single integration would be sufficient for the rule to function properly. In reality, certain rules may require multiple integrations to work correctly. To clarify the requirements, the tooltip message should be updated.
See the linked SDH for more detail.
Proposed Solution
Update the tooltip message to:
"One or more integrations may be required for this rule to work correctly. Please refer to the setup guide section of the rule for more information."
This new message will better inform users that multiple integrations might be necessary for the rule to function properly and direct them to the setup guide for more information.