Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update threshold rule schema to disallow empty field string #1099

Merged

Conversation

brokensound77
Copy link
Contributor

Issues

related to #1097
related to #1098 (same changes for 7.12 branch)

Summary

Changes threshold.field to disallow empty strings and instead just use an empty array for non-defined values.

@brokensound77 brokensound77 added Rule: Tuning tweaking or tuning an existing rule python Internal python for the repository v7.13.0 7.13 rules release package labels Apr 12, 2021
@brokensound77 brokensound77 requested a review from rw-access April 12, 2021 14:45
detection_rules/rule.py Outdated Show resolved Hide resolved
spong pushed a commit to elastic/kibana that referenced this pull request Apr 15, 2021
…reshold rules (#97111)

## Issues
related to elastic/detection-rules#1097
related to elastic/detection-rules#1099

## Summary

`threshold.field` is an array that currently requires at least one value. An empty string `""` was required if no value was supplied. Instead, this needs to be replaced with no string and just an empty array.
### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Apr 15, 2021
…reshold rules (elastic#97111)

## Issues
related to elastic/detection-rules#1097
related to elastic/detection-rules#1099

## Summary

`threshold.field` is an array that currently requires at least one value. An empty string `""` was required if no value was supplied. Instead, this needs to be replaced with no string and just an empty array.
### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Apr 15, 2021
…reshold rules (elastic#97111)

## Issues
related to elastic/detection-rules#1097
related to elastic/detection-rules#1099

## Summary

`threshold.field` is an array that currently requires at least one value. An empty string `""` was required if no value was supplied. Instead, this needs to be replaced with no string and just an empty array.
### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)
kibanamachine added a commit to elastic/kibana that referenced this pull request Apr 15, 2021
…reshold rules (#97111) (#97291)

## Issues
related to elastic/detection-rules#1097
related to elastic/detection-rules#1099

## Summary

`threshold.field` is an array that currently requires at least one value. An empty string `""` was required if no value was supplied. Instead, this needs to be replaced with no string and just an empty array.
### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>
@rw-access rw-access merged commit e656a98 into elastic:main Apr 15, 2021
kibanamachine added a commit to elastic/kibana that referenced this pull request Apr 16, 2021
…reshold rules (#97111) (#97290)

## Issues
related to elastic/detection-rules#1097
related to elastic/detection-rules#1099

## Summary

`threshold.field` is an array that currently requires at least one value. An empty string `""` was required if no value was supplied. Instead, this needs to be replaced with no string and just an empty array.
### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>
@brokensound77 brokensound77 deleted the disallow-empty-threshold-field-main branch August 14, 2021 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
python Internal python for the repository Rule: Tuning tweaking or tuning an existing rule v7.13.0 7.13 rules release package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants