Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security Solution] Add ability to bulk update all rules that don't have conflicts (DRAFT) #180589

Open
Tracked by #174168
jpdjere opened this issue Apr 11, 2024 · 3 comments
Open
Tracked by #174168

[Security Solution] Add ability to bulk update all rules that don't have conflicts (DRAFT) #180589

jpdjere opened this issue Apr 11, 2024 · 3 comments
Labels
Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. triage_needed

Comments

@jpdjere
Copy link
Contributor

jpdjere commented Apr 11, 2024 •
edited by banderror

Epics: https://github.com/elastic/security-team/issues/1974 (internal), #174168
Design Discussion context: #178211
Design: ?

馃毀 Ticket under construction 馃毀

Summary

In the Rule Updates table, the user should have the ability to fast-forward upgrade all rules that have no conflicts in their updates. This means that all of the fields of the rule returned with a CONFLICT value of NO from the /upgrade/_review endpoint.

By using this functionality, all the rules should be updates to the merged version of the field with no other intervention needed by the user.

Background

TBD

Acceptance criteria

TBD
@jpdjere jpdjere added triage_needed Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Detection Rule Management Security Detection Rule Management Team labels Apr 11, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

@jpdjere jpdjere added the Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules label Apr 11, 2024
@jpdjere jpdjere mentioned this issue Apr 11, 2024
Open
@banderror banderror changed the title [Security Solution] Add ability to bulk update all rules that don't have conflicts [Security Solution] Add ability to bulk update all rules that don't have conflicts (DRAFT) Apr 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. triage_needed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jpdjere @elasticmachine