Skip to content
This repository was archived by the owner on Jan 27, 2023. It is now read-only.

[snapshot] Create minimal detection_rules package#843

Closed
rw-access wants to merge 3 commits intosnapshotfrom
create-detection-rules
Closed

[snapshot] Create minimal detection_rules package#843
rw-access wants to merge 3 commits intosnapshotfrom
create-detection-rules

Conversation

@rw-access
Copy link
Copy Markdown

@rw-access rw-access commented Feb 3, 2021

This is the start of a detection_rules package.
Related to https://github.com/elastic/security-team/issues/17

Includes

  • kibana/rules/rule-*.json: Individual rules as separate files
  • kibana/rules/changelog.json: Complete changelog for all rules in the package
  • manifest.yml: Specifies the package metadata, uses a non-integration package type and marks the package as experimental.

When the format is stabilized and the package is ready to be promoted, a follow on PR will be created to elastic/package-spec to add the specification for the kibana/rules/ folder.

{
  "name": "detection_rules",
  "title": "Detection rules",
  "version": "0.0.1-dev.1",
  "release": "experimental",
  "description": "Rules for the detection engine in the Security application.",
  "type": "rules",
  "download": "/epr/detection_rules/detection_rules-0.0.1-dev.1.zip",
  "path": "/package/detection_rules/0.0.1-dev.1",
  "format_version": "1.0.0",
  "readme": "/package/detection_rules/0.0.1-dev.1/docs/README.md",
  "license": "basic",
  "categories": [
    "security"
  ],
  "conditions": {
    "kibana.version": "^7.12.0"
  },
  "assets": [
    "/package/detection_rules/0.0.1-dev.1/manifest.yml",
    "/package/detection_rules/0.0.1-dev.1/docs/README.md",
    "/package/detection_rules/0.0.1-dev.1/kibana/rules/CHANGELOG.json",
    "/package/detection_rules/0.0.1-dev.1/kibana/rules/rule-a9cb3641-ff4b-4cdc-a063-b4b8d02a67c7.json",
    "/package/detection_rules/0.0.1-dev.1/kibana/rules/rule-ce64d965-6cb0-466d-b74f-8d2c76f47f05.json"
  ],
  "owner": {
    "github": "elastic/protections"
  }
}

@elasticmachine
Copy link
Copy Markdown
Collaborator

elasticmachine commented Feb 3, 2021

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview

Expand to view the summary

Build stats

  • Build Cause: Branch indexing

  • Start Time: 2021-03-16T22:28:29.973+0000

  • Duration: 30 min 7 sec

  • Commit: 1ac3c1e

Test stats 🧪

Test Results
Failed 0
Passed 65
Skipped 0
Total 65

Trends 🧪

Image of Build Times

Image of Tests

@ruflin
Copy link
Copy Markdown
Collaborator

ruflin commented Feb 24, 2021

@rw-access Great to see progress on this. As soon as this stabilises and you get to the package-spec work, check out our change proposal flow: https://github.com/elastic/package-spec/blob/master/CONTRIBUTING.md#change-proposals

@rw-access
Copy link
Copy Markdown
Author

elastic/package-spec is up to date. a lot has changed and this is an integration package now, so I'm going to update the test package and publish this first to elastic/integrations.

@rw-access rw-access closed this Mar 18, 2021
@rw-access rw-access deleted the create-detection-rules branch March 30, 2021 22:15
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants