elastic / elastic/detection-rules
[FR] Revisit Filter Schema for Removal or Extension
Open
backlog
enhancement
python
schema
- Dominant language
- Python
- Stars
- 2.7k
- Forks
- 696
- Avg merge
- 4d 17h
- Merged PRs (30d)
- 87
Description
## Summary
Related to https://github.com/elastic/detection-rules/pull/3753
We need to look at the `class Filter` Schema and determine if we want to fully extend to support all the other Extended classes or leave the schema open. Historically the meta schema was left open, then we added stricter support for TRADE use cases. Now that we're supporting DAC, we need to consider if we want to leave it open or fully support the filter schemas implemented in Kibana.
Contributor guide
Assessment
This issue has not been assessed yet.