Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Detection Engine][Rule Creation] - Use ESQL query fields for custom highlighted fields #171058

Closed
yctercero opened this issue Nov 10, 2023 · 2 comments
Closed

[Detection Engine][Rule Creation] - Use ESQL query fields for custom highlighted fields #171058

yctercero opened this issue Nov 10, 2023 · 2 comments
Labels
enhancement New value added to drive a business result Feature:Rule Creation Security Solution Detection Rule Creation workflow Team:Detection Engine Security Solution Detection Engine Area Team:Detections and Resp Security Detection Response Team

Comments

@yctercero
Copy link
Contributor

Describe the feature:

In ESQL, you are able to specify unmapped fields that are returned in the results. At the moment, you are only able to specify mapped fields from the source event for custom highlighted fields. Use similar logic as is used for rule name override, to allow unmapped ESQL fields to be included in the custom highlighted fields option.

Component to use - https://github.com/elastic/kibana/blob/main/x-pack/plugins/security_solution/public/detection_engine/rule_creation/components/esql_autocomplete/esql_autocomplete.tsx
@yctercero yctercero added enhancement New value added to drive a business result Team:Detections and Resp Security Detection Response Team Feature:Rule Creation Security Solution Detection Rule Creation workflow Team:Detection Engine Security Solution Detection Engine Area labels Nov 10, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@yctercero
Copy link
Contributor Author

Addressed in #177746

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New value added to drive a business result Feature:Rule Creation Security Solution Detection Rule Creation workflow Team:Detection Engine Security Solution Detection Engine Area Team:Detections and Resp Security Detection Response Team
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@yctercero @elasticmachine