[Security Solution]Suppression configuration displaying on switching from Query to EQL Rule under Define Rule Section #157358
Labels
8.14 candidate
bug
Fixes for quality problems that affect the customer experience
consider-next
impact:high
Addressing this issue will have a high level of impact on the quality/strength of our product.
invalid
Team:Detection Engine
Security Solution Detection Engine Area
Team:Detections and Resp
Security Detection Response Team
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
v8.9.0
Milestone
Originally found by @MadameSheema
Describe the bug
Suppression configuration displaying on switching from Query to EQL Rule under Define Rule Section
Build Details:
Steps
Custom query
Sypression configuration
Rule Type
for instance: Event CorrelationDefine rule
step summary information about the rule suppression is displayed which is incorrect.Additional Note
suppression is not getting performed for the created EQL rule just suppression configuration are showing under the created EQL Rule
#156247 (comment)
Screen-Cast
Create.new.rule.-.Kibana.Mozilla.Firefox.2023-05-11.13-11-51.mp4
The text was updated successfully, but these errors were encountered: