detection-rules
detection-rules copied to clipboard
elastic
[FR] Include Timeline Templates export/import in the CLI such that they can be imported and exported together with rules like exceptions and action connectors
Repository Feature
None
Problem Description
Currently, timeline templates are referenced by id and name in the exported rule files. However, the tempalte itself is not exported/cannot be imported via the CLI.
This limitations is also mentioned in the DaC Documentation.
Desired Solution
The Kibana API exists.
Best would be to implement this analog to the exception lists and action connectors. I hope its possible to use the same concepts and just adapt the code to the Timeline Template API.
Considered Alternatives
No response
Additional Context
This feature is essential for our DaC workflows for customer projects, so we are thinking about taking a look at the code base and checking if we can contribute to this, in case there are currently no plans of implementing this by elastic.
Thus, I wanted to ask if there are already some plans for this or if there has already been progress in the background or anything 🙂
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
![botelastic[bot] avatar](https://avatars.githubusercontent.com/u/6764390?v=4 "Published by a pub.dev verified publisher"){kind=small}
Since this is an important topic for us and our customers, we are currently working on implementing this.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
This has been closed due to inactivity. If you feel this is an error, please re-open and include a justifying comment.