elastic / elastic/detection-rules

[FR] Revisit Filter Schema for Removal or Extension

Open
#3,773 0 comments 0 reactions 0 assignees View on GitHub
backlog enhancement python schema
Dominant language
Python
Stars
2.7k
Forks
696
Avg merge
4d 17h
Merged PRs (30d)
87

Description

## Summary

Related to https://github.com/elastic/detection-rules/pull/3753

We need to look at the `class Filter` Schema and determine if we want to fully extend to support all the other Extended classes or leave the schema open. Historically the meta schema was left open, then we added stricter support for TRADE use cases. Now that we're supporting DAC, we need to consider if we want to leave it open or fully support the filter schemas implemented in Kibana.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.