Eric Forte 99f32f13b2 [Bug] Ignore Other Keep Wildcards (#5792) ...

* Ignore other Keep Wildcards

* Added a unit test for multiple keeps

* Add keep star unit tests

(cherry picked from commit 26d37dd62e)

2026-03-09 23:36:50 +00:00

..

data

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 12:46:28 -07:00

kuery

[FR] Add white space checking for KQL parse (#3789)

2025-07-31 14:23:53 -04:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

base.py

[FR] Expand CUSTOM_RULES_DIR to support user relative paths (#5390)

2025-12-03 17:23:16 +00:00

test_all_rules.py

[FR] Minor Typo Fixes (#5784)

2026-03-06 22:15:45 +00:00

test_gh_workflows.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_hunt_data.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_packages.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_python_library.py

[Bug] Add unit tests and fix Alert Suppression schema validation for ThresholdQueryRuleData (#5196)

2025-10-09 16:21:21 -04:00

test_rules_remote.py

[Bug] Ignore Other Keep Wildcards (#5792)

2026-03-09 23:36:50 +00:00

test_schemas.py

[FR] Add keep metadata check to esql schema test (#5441)

2026-01-14 21:06:56 +00:00

test_specific_rules.py

[Rule Tuning] Remove host.os.type Unit Test Exception (#5317)

2025-11-14 16:50:44 +00:00

test_toml_formatter.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_transform_fields.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_utils.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_version_locking.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00