-
Notifications
You must be signed in to change notification settings - Fork 206
Closed
Labels
Feature: RulesTeam: Detections/ResponseDetections and ResponseDetections and ResponseTeam: Docsv8.5.0
Description
Description
PR elastic/kibana#140064 (issue elastic/kibana#139250) enhances how saved queries are displayed and updated when used with a detection rule.
Details from elastic/kibana#140064:
- adds checkbox Load the saved query dynamically on each rule execution for query and saved_query rule types on create/edit form if saved query selected. When checkbox checked, updates, made by user, to filters and query input will be dismissed. Filters and input will become disabled, to prevent further changes in controls. On saving, rule would be saved as saved_query type.
- create unified query/saved_query schema, against which rules would be validated. That would allow to save query rule as saved_query and vice verse
- shows on rule details page saved query name and loads its filters and query, so these values shown to users, will always be up to date with the saved query
Metadata
Metadata
Assignees
Labels
Feature: RulesTeam: Detections/ResponseDetections and ResponseDetections and ResponseTeam: Docsv8.5.0
