elastic / elastic/detection-rules
[FR] Support Visualization of Previous Rule Versions
Open
backlog
enhancement
Team: TRADE
- Dominant language
- Python
- Stars
- 2.7k
- Forks
- 696
- Avg merge
- 4d 17h
- Merged PRs (30d)
- 87
Description
### Repository Feature
Core Repo - (rule management, validation, testing, lib, cicd, etc.)
### Problem Description
When analyzing alert data, we struggle to quickly identify changes in rule logic across different versions. This significantly increases the time spent manually validating rule logic changes.
### Desired Solution
Add a new feature to the Python module to fetch previous rule versions (local or EPR) and display them in the terminal. An integrated diff feature would be awesome.
### Considered Alternatives
_No response_
### Additional Context
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.