elastic / elastic/detection-rules

[FR] Support Visualization of Previous Rule Versions

Open
#4,709 1 comment 0 reactions 0 assignees View on GitHub
backlog enhancement Team: TRADE
Dominant language
Python
Stars
2.7k
Forks
696
Avg merge
4d 17h
Merged PRs (30d)
87

Description

### Repository Feature

Core Repo - (rule management, validation, testing, lib, cicd, etc.)

### Problem Description

When analyzing alert data, we struggle to quickly identify changes in rule logic across different versions. This significantly increases the time spent manually validating rule logic changes.

### Desired Solution

Add a new feature to the Python module to fetch previous rule versions (local or EPR) and display them in the terminal. An integrated diff feature would be awesome.

### Considered Alternatives

_No response_

### Additional Context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.