You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Related to #3266
Related to #3442
When attempting to use the rule importer for Threshold rules, there appears to some issues with not being able to auto import the threshold values when provided in the ndjson.
Describe the bug
Related to #3266
Related to #3442
When attempting to use the rule importer for Threshold rules, there appears to some issues with not being able to auto import the threshold values when provided in the ndjson.
Based on this code https://github.com/elastic/detection-rules/blob/main/detection_rules/cli_utils.py#L164-L167, this issue has existed since it was first introduced several years ago most likely because schemas didn't exist at the time.
What we need to do is update the cli_utiles importer to use existing fields if they exist instead of prompting. This should be a relatively small fix.
To Reproduce
Steps to reproduce the behavior:
Patch rule_prompt
I think we just need to remove the custom prompting logic.
The text was updated successfully, but these errors were encountered: