detection-rules icon indicating copy to clipboard operation
detection-rules copied to clipboard

[FR] Unit Test for elastic_endpoint_security Rule ID Change

Open Mikaayenson opened this issue 9 months ago • 0 comments

Repository Feature

Core Repo - (rule management, validation, testing, lib, cicd, etc.)

Problem Description

Based on recent changes in Kibana, the solution now expects us to preserve the rule_id for elastic_endpoint_security. We need to now add a unit test to ensure we don't inadvertently change the rule in the future without considering the impact upstream.

Today, we can change the rule_id and the unit tests will pass.

Desired Solution

Simple unit test to enforce specific rules should not change. The only rule_id referenced so far appears to be 9a1a2dae-0b5f-4c3d-8305-a268d404c306.

Considered Alternatives

N/A

Additional Context

Related - https://github.com/elastic/security-team/issues/7216

Mikaayenson avatar May 07 '25 13:05 Mikaayenson