---
title: Create a rule in the experimental alerting system
description: Create rules in Kibana's experimental alerting system using the ES|QL editor, AI Agent, rule builder, or directly from a Discover session.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/create-a-rule
products:
  - Kibana
applies_to:
  - Elastic Cloud Serverless: Experimental
  - Elastic Stack: Planned
---

# Create a rule in the experimental alerting system
The experimental alerting system in Kibana provides several ways to create rules. For details on configurable rule settings and guidance on how to configure them, refer to [Configure a rule](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/configure-a-rule).

| Option                                                                                                                                                                                                          | Best for                                                                                     |
|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------|
| [Create an ES|QL rule](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/create-esql-rule)                                         | Full control over the query. Supports both a step-by-step form and a YAML editor.            |
| [Create using Elastic Agent Builder](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/create-rules-action-policies-agent-builder) | When you know what you want to detect but aren't sure how to write the ES|QL.                |
| [Use the rule builder](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/use-rule-builder)                                         | Rules that follow a guided, form-based setup.                                                |
| [Create from Discover](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/create-rule-from-discover)                                | When you already have an ES|QL query working in Discover and want to convert it into a rule. |

<note>
  For query examples ranging from a basic event filter to SLO burn rate and persistent breach detection, refer to [ES|QL query patterns](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6523/explore-analyze/alerting/experimental-alerting-system/rules/esql-query-patterns).
</note>