streamalert icon indicating copy to clipboard operation
streamalert copied to clipboard

support 'classify_only' without having to set service + source in test events

Open ryandeivert opened this issue 4 years ago • 0 comments

Background

Test events currently support classify_only type tests, but these still require having a source and service also set in the test event.

Desired Change

Make it possible to have "classify only" test events event if your configuration is currently not set up to ingest the type of data being tested.

ryandeivert avatar Apr 30 '20 16:04 ryandeivert