elastic / elastic/detection-rules
[Rule Tuning] Reduce New Term Rules history_window_start
Open
Rule: Tuning
Team: TRADE
- Dominant language
- Python
- Stars
- 2.7k
- Forks
- 696
- Avg merge
- 4d 17h
- Merged PRs (30d)
- 87
Description
### Link to Rule
https://github.com/search?q=repo%3Aelastic%2Fdetection-rules%20(%22now-14d%22%20OR%20%22now-10d%22%20OR%20%22now-15d%22)&type=code
### Rule Tuning Type
Performance improvement
### Description
Reduce New Term Rules history_window_start to improve New Term rules performance and limit high values only when necessary.
Contributor guide
Assessment
This issue has not been assessed yet.