[DE][9.4 & Serverless] New space id filter available in Kibana advanced settings for all detection rules

[nastasha-solomon]

Summary

Fixes #5270.

• Added docs for the securitySolution:includedDataStreamNamespacesForRuleExecution advanced setting.
• Added a new troubleshooting subsection for missing/unexpected alerts if users suspect the namespace filter was excluding alerts.

Previews

• Limit detection rules to specific data stream namespaces
• Troubleshoot namespace filter

Generative AI disclosure

1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?

• Yes
• No

Cursor + Claude

[github-actions]

Vale Linting Results

Summary: 3 suggestions found

💡 Suggestions (3)

File	Line	Rule	Message
troubleshoot/security/detection-rules.md	165	Elastic.WordChoice	Consider using 'can, might' instead of 'may', unless the term is in the UI.
troubleshoot/security/detection-rules.md	201	Elastic.Wordiness	Consider using 'also' instead of 'In addition'.
troubleshoot/security/detection-rules.md	269	Elastic.WordChoice	Consider using 'can, might' instead of 'may', unless the term is in the UI.

---

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

[github-actions]

🔍 Preview links for changed docs

• solutions/security/get-started/configure-advanced-settings.md
• troubleshoot/security/detection-rules.md