[Security][Detections] Update ML Jobs group from SIEM to Security

[spong]

With the recent rename of the SIEM plugin to Security Solution (#67902), we'll also need to update all SIEM references around our integration with ML.

@MikePaquette will provide an update with the correct name (most likely just Security)

This includes:

Creation of ML-based Rules:

ML Job Settings popover which references Security in copy, but SIEM as the group name:

The actual ML Jobs and their underlying template (as shown in the ML APP). This will need to be performed by the @elastic/security-intelligence-analytics team.

[elasticmachine]

Pinging @elastic/siem (Team:SIEM)

[devonakerr]

@randomuserid this is just one metadata field?

[randomuserid]

Those are the tags in the second pic. The third pic is the recognizer.

[randomuserid]

@blaklaybul this is the issue for the "siem" text. It appears in the job tags and what looks like text in the recognizer UI?

[blaklaybul]

@randomuserid thanks for letting me know - can you please provide us with the appropriate text when it is available?

[randomuserid]

@spong is the replacement term "Security"

[spong]

@randomuserid -- @MikePaquette is verifying the replacement term and will let us know.

[spong]

@randomuserid & @blaklaybul -- Do you think we're good to remove the Beta labeling on these jobs as well?

[blaklaybul]

I'm happy to remove the beta tags.

[spong]

Sounds good @blaklaybul! Can we coordinate this with the other ML Job updates (from @randomuserid) for 7.9? Also, @MikePaquette verified the replacement term as Security, so we're good to make that change as well now too.

[blaklaybul]

great! @peteharverson can we remove the beta tags from jobs and replace any references to SIEM with Security?

@spong I'm catching up with @randomuserid tomorrow to discuss his new jobs list and what we can feasibly add to 7.9.

[peteharverson]

@blaklaybul as discussed, I'll remove the beta tags from descriptions, and will change any references to SIEM with Security in:

• module titles
• descriptions
• job groups

I will not change siem to security in module IDs or the created_by field.