Skip to content

[FR] Support Alert Suppression for EQL Sequences in 8.18 #4326

@Mikaayenson

Description

@Mikaayenson

Repository Feature

Core Repo - (rule management, validation, testing, lib, cicd, etc.)

Problem Description

With elastic/kibana#189725 starting in 8.18 alert suppression for eql sequences is available.

Desired Solution

We need to update the unit test https://github.com/elastic/detection-rules/blob/main/tests/test_all_rules.py#L1410-L1422 to support this.

Considered Alternatives

No response

Additional Context

We need to add support continuing with #3986.

Metadata

Metadata

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions