opensearch-project / opensearch-project/security-analytics
[BUG] There are duplicate pre-packaged rules that overwrite each other
Open
Nobody has claimed this yet.
bug
- Dominant language
- Java
- Stars
- 111
- Forks
- 111
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 13
Description
What is the bug?
The others_cloud category have duplicate pre-packaged rules with other categories
What is the expected behavior?
We should be removing the duplicated pre-packaged rules. If these should not be removed, we need a better solution to deal wit duplicates if we can remove them.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file or test is named in the issue. Start by locating the pre-packaged rules for the others_cloud category and the other categories, then compare their rule definitions; done means duplicate rules no longer overwrite one another or a documented duplicate-handling solution is implemented.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100