Skip to content

Commit 9c8e86e

Browse files
authored
[Security Solution] Adds customized_fields and has_base_version fields to internal rule schema (elastic#235394)
## Summary Precursor to elastic#234793 **Must go into serverless before that PR is merged in** Adds new fields related to [customized rule alert telemetry](elastic#230856) to the internal rule schema, an addition that must be done before adding them to the security rule schemas (e.g. `RuleResponse`, etc.)
1 parent 942e137 commit 9c8e86e

File tree

1 file changed

+8
-0
lines changed
  • x-pack/solutions/security/plugins/security_solution/server/lib/detection_engine/rule_schema/model

1 file changed

+8
-0
lines changed

x-pack/solutions/security/plugins/security_solution/server/lib/detection_engine/rule_schema/model/rule_schemas.ts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -104,6 +104,14 @@ export const RuleSourceCamelCased = z.discriminatedUnion('type', [
104104
z.object({
105105
type: z.literal('external'),
106106
isCustomized: IsExternalRuleCustomized,
107+
customizedFields: z
108+
.array(
109+
z.object({
110+
fieldName: z.string(),
111+
})
112+
)
113+
.optional(),
114+
hasBaseVersion: z.boolean().optional(),
107115
}),
108116
z.object({
109117
type: z.literal('internal'),

0 commit comments

Comments
 (0)