Skip to content
This repository has been archived by the owner on Jan 27, 2023. It is now read-only.

[snapshot] Create minimal detection_rules package #843

Closed
wants to merge 3 commits into from

Conversation

rw-access
Copy link

@rw-access rw-access commented Feb 3, 2021

This is the start of a detection_rules package.
Related to https://github.com/elastic/security-team/issues/17

Includes

  • kibana/rules/rule-*.json: Individual rules as separate files
  • kibana/rules/changelog.json: Complete changelog for all rules in the package
  • manifest.yml: Specifies the package metadata, uses a non-integration package type and marks the package as experimental.

When the format is stabilized and the package is ready to be promoted, a follow on PR will be created to elastic/package-spec to add the specification for the kibana/rules/ folder.

{
  "name": "detection_rules",
  "title": "Detection rules",
  "version": "0.0.1-dev.1",
  "release": "experimental",
  "description": "Rules for the detection engine in the Security application.",
  "type": "rules",
  "download": "/epr/detection_rules/detection_rules-0.0.1-dev.1.zip",
  "path": "/package/detection_rules/0.0.1-dev.1",
  "format_version": "1.0.0",
  "readme": "/package/detection_rules/0.0.1-dev.1/docs/README.md",
  "license": "basic",
  "categories": [
    "security"
  ],
  "conditions": {
    "kibana.version": "^7.12.0"
  },
  "assets": [
    "/package/detection_rules/0.0.1-dev.1/manifest.yml",
    "/package/detection_rules/0.0.1-dev.1/docs/README.md",
    "/package/detection_rules/0.0.1-dev.1/kibana/rules/CHANGELOG.json",
    "/package/detection_rules/0.0.1-dev.1/kibana/rules/rule-a9cb3641-ff4b-4cdc-a063-b4b8d02a67c7.json",
    "/package/detection_rules/0.0.1-dev.1/kibana/rules/rule-ce64d965-6cb0-466d-b74f-8d2c76f47f05.json"
  ],
  "owner": {
    "github": "elastic/protections"
  }
}

@elasticmachine
Copy link
Collaborator

elasticmachine commented Feb 3, 2021

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview

Expand to view the summary

Build stats

  • Build Cause: Branch indexing

  • Start Time: 2021-03-16T22:28:29.973+0000

  • Duration: 30 min 7 sec

  • Commit: 1ac3c1e

Test stats 🧪

Test Results
Failed 0
Passed 65
Skipped 0
Total 65

Trends 🧪

Image of Build Times

Image of Tests

@ruflin
Copy link
Member

ruflin commented Feb 24, 2021

@rw-access Great to see progress on this. As soon as this stabilises and you get to the package-spec work, check out our change proposal flow: https://github.com/elastic/package-spec/blob/master/CONTRIBUTING.md#change-proposals

@rw-access
Copy link
Author

elastic/package-spec is up to date. a lot has changed and this is an integration package now, so I'm going to update the test package and publish this first to elastic/integrations.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants