wip: chained correlation rules

SigmaHQ · Oct 18, 2024 · 020e759 · 020e759
1 parent aaf580d
commit 020e759
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/tests/test_conversion_correlations.py b/tests/test_conversion_correlations.py
@@ -375,6 +375,7 @@ def test_correlation_generate_chained_rule(test_backend):
     type: event_count
     rules:
         - failed_login
+    generate: true
     group-by:
         - User
     timespan: 10m
@@ -388,6 +389,7 @@ def test_correlation_generate_chained_rule(test_backend):
     rules:
         - multiple_failed_login
         - successful_login
+    generate: true
     group-by:
         - User
     timespan: 10m