-
Notifications
You must be signed in to change notification settings - Fork 8.5k
Closed
Labels
Feature:Detection RulesSecurity Solution rules and Detection EngineSecurity Solution rules and Detection EngineFeature:RAClabel obsoletelabel obsoleteTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeamTheme: raclabel obsoletelabel obsoleteenhancementNew value added to drive a business resultNew value added to drive a business resulttechnical debtImprovement of the software architecture and operational architectureImprovement of the software architecture and operational architecturev7.13.0
Description
Same as: #91265
Describe the feature:
With the addition of #82401 (issue: #79785) We now have the ability to record executionStatus errors to the event log and most likely no longer need the rule status saved objects. I think it would be in our best interest to start removing references to this and hopefully move to only using the event log for managing error history and current status.
Metadata
Metadata
Assignees
Labels
Feature:Detection RulesSecurity Solution rules and Detection EngineSecurity Solution rules and Detection EngineFeature:RAClabel obsoletelabel obsoleteTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeamSecurity Detection Response TeamTheme: raclabel obsoletelabel obsoleteenhancementNew value added to drive a business resultNew value added to drive a business resulttechnical debtImprovement of the software architecture and operational architectureImprovement of the software architecture and operational architecturev7.13.0