Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Detection Engine][Serverless] Enable ES|QL rule in Serverless #181937

Closed
3 tasks done
yctercero opened this issue Apr 29, 2024 · 3 comments
Closed
3 tasks done

[Detection Engine][Serverless] Enable ES|QL rule in Serverless #181937

yctercero opened this issue Apr 29, 2024 · 3 comments
Labels
Project:Serverless Work as part of the Serverless project for its initial release Team:Detection Engine Security Solution Detection Engine Area Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Comments

@yctercero
Copy link
Contributor

yctercero commented Apr 29, 2024 •
edited
Loading

Summary

ES|QL rule was introduced in 8.11 for ESS. Now that ES|QL is GA-ing in 8.14 it is also becoming available in stateless. We will need to remove the feature flag.

Requirements

Target release: May 13th (any release post May 6th)
@botelastic botelastic bot added the needs-team Issues missing a team label label Apr 29, 2024
@yctercero yctercero added Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Detection Engine Security Solution Detection Engine Area and removed needs-team Issues missing a team label labels Apr 29, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-engine (Team:Detection Engine)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@yctercero yctercero added the Project:Serverless Work as part of the Serverless project for its initial release label Apr 29, 2024
@yctercero yctercero mentioned this issue Apr 29, 2024
Closed
@nastasha-solomon nastasha-solomon changed the title [Detection Engine] Enable ES|QL rule in Serverless [Detection Engine][Serverless] Enable ES|QL rule in Serverless Apr 29, 2024
@nastasha-solomon nastasha-solomon mentioned this issue Apr 30, 2024
Closed
10 tasks
@vitaliidm vitaliidm mentioned this issue May 7, 2024
Merged
1 task
vitaliidm added a commit that referenced this issue May 29, 2024
@vitaliidm
[Security Solution][Detection Engine] enables Cypress and FTR tests f…
75e0b3b 
…or ES|QL rule type on serverless (#182789)

## Summary
- addresses #181937
- enables Cypress and FTR tests for ES|QL rule type on serverless

- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
Cypress ES|QL tests(x100):
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5881
FTR(x100):
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5875
@yctercero
Copy link
Contributor Author

Complete

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Project:Serverless Work as part of the Serverless project for its initial release Team:Detection Engine Security Solution Detection Engine Area Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@yctercero @elasticmachine