Failing test: Detection Engine - IM Rule Execution Logic Integration Tests - Serverless Env - Complete Tier.x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_execution_logic/indicator_match/trial_license_complete_tier/indicator_match_alert_suppression·ts - Indicator match execution logic API @ess @serverless Indicator match type rules, alert suppression Code execution path: events count is smaller than threats count should suppress an alert on real rule executions #98467
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Add Fleet issue to Platform Ingest - UI & Integrations project | |
on: | |
issues: | |
types: | |
- labeled | |
env: | |
INGEST_PROJECT_ID: 'PVT_kwDOAGc3Zs4AogrP' | |
FLEET_LABEL: 'Team:Fleet' | |
AREA_FIELD_ID: 'PVTSSF_lADOAGc3Zs4AogrPzggEiBs' | |
FLEET_UI_OPTION_ID: '411a7b86' | |
jobs: | |
add_to_ingest_project: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: octokit/graphql-action@8ad880e4d437783ea2ab17010324de1075228110 # v2.3.2 | |
id: add_to_project | |
if: ${{ github.event.label.name == env.FLEET_LABEL }} | |
with: | |
query: | | |
# Variables have to be snake cased because of https://github.com/octokit/graphql-action/issues/164 | |
mutation AddToIngestProject($project_id: ID!, $content_id: ID!) { | |
addProjectV2ItemById(input: { projectId: $project_id, contentId: $content_id }) { | |
item { | |
id | |
} | |
} | |
} | |
project_id: ${{ env.INGEST_PROJECT_ID }} | |
content_id: ${{ github.event.issue.node_id }} | |
env: | |
GITHUB_TOKEN: ${{ secrets.FLEET_PROJECT_TOKEN }} | |
- uses: octokit/graphql-action@8ad880e4d437783ea2ab17010324de1075228110 # v2.3.2 | |
id: set_fleet_ui_area | |
if: github.event.label.name == env.FLEET_LABEL | |
with: | |
query: | | |
mutation updateIngestArea($item_id: ID!, $project_id: ID!, $area_field_id: ID!, $area_id: String) { | |
updateProjectV2ItemFieldValue( | |
input: { itemId: $item_id, projectId: $project_id, fieldId: $area_field_id, value: { singleSelectOptionId: $area_id } }) { | |
clientMutationId | |
} | |
} | |
item_id: ${{ fromJSON(steps.add_to_project.outputs.data).addProjectV2ItemById.item.id }} | |
project_id: ${{ env.INGEST_PROJECT_ID }} | |
area_field_id: ${{ env.AREA_FIELD_ID }} | |
area_id: ${{ env.FLEET_UI_OPTION_ID }} | |
env: | |
GITHUB_TOKEN: ${{ secrets.FLEET_PROJECT_TOKEN }} |