Skip to content

[Security Solution] [Detections] Replace rule status saved object #83235

@dhurley14

Description

@dhurley14

Same as: #91265

Describe the feature:

With the addition of #82401 (issue: #79785) We now have the ability to record executionStatus errors to the event log and most likely no longer need the rule status saved objects. I think it would be in our best interest to start removing references to this and hopefully move to only using the event log for managing error history and current status.

Metadata

Metadata

Assignees

Labels

Feature:Detection RulesSecurity Solution rules and Detection EngineFeature:RAClabel obsoleteTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeamTheme: raclabel obsoleteenhancementNew value added to drive a business resulttechnical debtImprovement of the software architecture and operational architecturev7.13.0

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions