Description

There is a PR adding functionality to add and edit rule's related integrations. Currently related integrations are only hardcoded in Elastic prebuilt rules. Users can view them on rules details page. When the mentioned above PR is merged users will be able to add related integrations when creating a custom rule. On top of that users will be able to update related integrations when editing a rule.

Background & resources

• PRs: [Security Solution] Allow users to edit related_integrations field for custom rules kibana#178295
• Issues/metas: [Security Solution] Allow users to edit related_integrations field for custom rules kibana#173595
• Point of contact: @maximpn
• Test environments: https://maximpn-pr-178295-edit-related-integrations.kbndev.co/ (use default username and password)

Which documentation set does this change impact?

ESS and serverless

ESS release

8.15

Serverless release

Mon, 6th May 2024

Feature differences

The feature is identical in ESS/serverless.

API docs impact

The feature touched existing rule management endpoints. All endpoints will accept related integrations as well as return them. The followings APIs are affected

• Get rule GET /api/detection_engine/rules
• Create rule POST /api/detection_engine/rules
• Update rule PUT /api/detection_engine/rules
• Patch rule PATCH /api/detection_engine/rules
• Find rules GET /api/detection_engine/rules/_find
• Bulk create rules POST /api/detection_engine/rules/_bulk_create (endpoint is deprecated)
• Bulk update rules PUT /api/detection_engine/rules/_bulk_update (endpoint is deprecated)
• Bulk patch rules PATCH /api/detection_engine/rules/_bulk_update (endpoint is deprecated)
• Bulk actions POST /api/detection_engine/rules/_bulk_action
  • Edit rules
  • Export rules
  • Import rules
  • Rule response from bulk operations
• Import rules POST /api/detection_engine/rules/_import
• Export rules POST /api/detection_engine/rules/_export

Prerequisites, privileges, feature flags

There is not a feature flag for the feature.

### Tasks
- [x] https://github.com/elastic/staging-serverless-security-docs/pull/337
- [ ] https://github.com/elastic/security-docs/pull/5151
- [x] API docs (classic) — https://github.com/elastic/security-docs/pull/5183