I get an error when trying to create a detection rule

Plugins Security Analytics
1

I have data sent by auditbeat version 8.15.5. They enter the datastream with the following settings:

{
  ".ds-logs-auditbeat-8.5.0-000001": {
    "settings": {
      "index": {
        "replication": {
          "type": "DOCUMENT"
        },
        "hidden": "true",
        "number_of_shards": "1",
        "provided_name": ".ds-logs-auditbeat-8.5.0-000001",
        "creation_date": "1771409911411",
        "number_of_replicas": "0",
        "uuid": "z8hoJ9fDRCqErxkJc9BKHA",
        "version": {
          "created": "137267827"
        }
      }
    }
  }
}

{
  "data_streams": [
    {
      "name": "logs-auditbeat-8.5.0",
      "timestamp_field": {
        "name": "@timestamp"
      },
      "indices": [
        {
          "index_name": ".ds-logs-auditbeat-8.5.0-000001",
          "index_uuid": "z8hoJ9fDRCqErxkJc9BKHA"
        }
      ],
      "generation": 1,
      "status": "GREEN",
      "template": "logs-auditbeat-8.5.0"
    }
  ]
}
2

@Ruslan1 Can you provide more details please. What error are you getting? Do you only see it in UI or in opensearch logs too? Can you provide a copy of the error?