makes more inclusive

elastic · Apr 13, 2023 · 79943da · 79943da
1 parent 6bc62fc
commit 79943da
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...ecurity_solution/server/lib/detection_engine/rule_types/utils/search_after_bulk_create.ts b/...ecurity_solution/server/lib/detection_engine/rule_types/utils/search_after_bulk_create.ts
@@ -137,7 +137,7 @@ export const searchAfterAndBulkCreate = async ({
         // skip the call to bulk create and proceed to the next search_after,
         // if there is a sort id to continue the search_after with.
         if (includedEvents.length !== 0) {
-          if (toReturn.createdSignalsCount + includedEvents.length > tuple.maxSignals) {
+          if (toReturn.createdSignalsCount + includedEvents.length >= tuple.maxSignals) {
             toReturn.warningMessages.push(getMaxSignalsWarning(tuple.maxSignals));
           }
           // make sure we are not going to create more signals than maxSignals allows