-
Notifications
You must be signed in to change notification settings - Fork 587
Open
Labels
Description
Repository Feature
Core Repo - (rule management, validation, testing, lib, cicd, etc.)
Problem Description
Create a comprehensive test that validates Detection-as-Code (DaC) functionality using rules that leverage all available rule features. This will ensure full feature coverage for rules and reduce risk of regressions during release cycles.
Desired Solution
- Use the Kibana UI to generate representative rules utilizing all possible rule type features (e.g., thresholds, exceptions, suppression, etc.).
- Export these rules as NDJSON.
- Use the CLI to:
- [ ] Import the rules into the repo using import-rules
- [ ] Export the rules back to Kibana via export-rules - Store the generated rule TOML files as fixtures for regression testing.
- Add a corresponding test case in test_remote_cli.sh to validate this flow.
- Ensure this is run as part of every release cycle.
Considered Alternatives
Previously done in manual verification but needs to be preserved as a formal regression test.
Additional Context
NA