[Detection Engine][Serverless] Enable ES|QL rule in Serverless

elastic / kibana

Your window into the Elastic Stack

https://www.elastic.co/products/kibana

Other

19.35k stars 7.98k forks source link

[Detection Engine][Serverless] Enable ES|QL rule in Serverless #181937

Open yctercero opened 2 weeks ago

yctercero commented 2 weeks ago

Summary

ES|QL rule was introduced in 8.11 for ESS. Now that ES|QL is GA-ing in 8.14 it is also becoming available in stateless. We will need to remove the feature flag.

Requirements

[x] Remove feature flag - https://github.com/elastic/kibana/pull/181616
[ ] Enable tests in serverless - WIP https://github.com/elastic/kibana/pull/182789
[ ] Coordinate with docs - https://github.com/elastic/security-docs/issues/5135

Target release: May 13th (any release post May 6th)

elasticmachine commented 2 weeks ago

Pinging @elastic/security-detection-engine (Team:Detection Engine)

elasticmachine commented 2 weeks ago

Pinging @elastic/security-solution (Team: SecuritySolution)