elastic / elastic/detection-rules
[FR][DAC] Consideration: Add support for exceptions APIs in Kibana module
- Dominant language
- Python
- Stars
- 2.7k
- Forks
- 696
- Avg merge
- 4d 17h
- Merged PRs (30d)
- 87
Description
**Note**: this work will target the [DAC-feature](https://github.com/elastic/detection-rules/tree/DAC-feature) branch
related to #3298
related to #1738
related to #3405
related to #3623
related to #3674
---
**This is a consideration and not a commitment to work at this point**. We should review the feasibility and supportability. If it is doable and not deemed maintainable, we can move the example code to the DAC reference for users to manually implement.
---
As of now, exceptions can be managed via the [export-rules](https://github.com/elastic/detection-rules/blob/89d89f15d22f5068fb7ce505aaeb8a6c2e49ff4a/lib/kibana/kibana/resources.py#L253-L267) and [import-rules](https://github.com/elastic/detection-rules/blob/89d89f15d22f5068fb7ce505aaeb8a6c2e49ff4a/lib/kibana/kibana/resources.py#L232-L251) methods/APIs. Further use cases are still being explored as to whether an `Exception` object should be added to the kibana module to wrap the exceptions [APIs](https://www.elastic.co/guide/en/security/current/exceptions-api-overview.html).
MVP would be the Kibana updates. Additionally consideration _could_ include some click commands or helper functions.
Contributor guide
Assessment
This issue has not been assessed yet.