You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When adding event.dataset to a package in base-fields.yml, there is no check or lint that complains if the value is not "package.datastream", for example
When starting the stack and testing the package manually, it complains that event.dataset is not set to panw_cortex_xdr.alerts, however it would be nice to do this check already on build/lint, saves time in the future, and makes sure no human error might cause it (like I did).
The text was updated successfully, but these errors were encountered:
mtojek
transferred this issue from elastic/elastic-package
Sep 6, 2021
When adding event.dataset to a package in base-fields.yml, there is no check or lint that complains if the value is not "package.datastream", for example
Package panw_cortex_xdr, datastream: alerts
When starting the stack and testing the package manually, it complains that
event.dataset
is not set topanw_cortex_xdr.alerts
, however it would be nice to do this check already on build/lint, saves time in the future, and makes sure no human error might cause it (like I did).The text was updated successfully, but these errors were encountered: