github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 01:38:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

[Security] Drop type EventCorrelationRule, it's really not needed (#113936)

Browse source
This commit is contained in:
Domenico Andreoli 2021-10-05 21:41:01 +02:00 • committed by GitHub
parent 0fe5d26c00
commit aea3c06316
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

7
x-pack/plugins/security_solution/cypress/objects/rule.ts
View file

@ -72,10 +72,6 @@ export interface OverrideRule extends CustomRule {
timestampOverride: string;
}
export interface EventCorrelationRule extends CustomRule {
language: string;
}
export interface ThreatIndicatorRule extends CustomRule {
indicatorIndexPattern: string[];
indicatorMappingField: string;
@ -330,7 +326,7 @@ export const getEqlRule = (): CustomRule => ({
maxSignals: 100,
});
export const getCCSEqlRule = (): EventCorrelationRule => ({
export const getCCSEqlRule = (): CustomRule => ({
customQuery: 'any where process.name == "run-parts"',
name: 'New EQL Rule',
index: [`${ccsRemoteName}:run-parts`],
@ -346,7 +342,6 @@ export const getCCSEqlRule = (): EventCorrelationRule => ({
lookBack: getLookBack(),
timeline: getTimeline(),
maxSignals: 100,
language: 'eql',
});
export const getEqlSequenceRule = (): CustomRule => ({

4
x-pack/plugins/security_solution/cypress/tasks/api_calls/rules.ts
View file

@ -5,7 +5,7 @@
* 2.0.
*/
import { CustomRule, EventCorrelationRule, ThreatIndicatorRule } from '../../objects/rule';
import { CustomRule, ThreatIndicatorRule } from '../../objects/rule';
export const createCustomRule = (rule: CustomRule, ruleId = 'rule_testing', interval = '100m') =>
cy.request({
@ -29,7 +29,7 @@ export const createCustomRule = (rule: CustomRule, ruleId = 'rule_testing', inte
failOnStatusCode: false,
});
export const createEventCorrelationRule = (rule: EventCorrelationRule, ruleId = 'rule_testing') =>
export const createEventCorrelationRule = (rule: CustomRule, ruleId = 'rule_testing') =>
cy.request({
method: 'POST',
url: 'api/detection_engine/rules',