Eric Forte 5a94b67c43 [Bug] Ignore Other Keep Wildcards (#5792) ...

* Ignore other Keep Wildcards

* Added a unit test for multiple keeps

* Add keep star unit tests

(cherry picked from commit 26d37dd62e)

2026-03-09 23:35:13 +00:00

..

data

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 12:46:28 -07:00

kuery

[FR] Add white space checking for KQL parse (#3789)

2025-07-31 18:26:14 +00:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

base.py

[FR] Expand CUSTOM_RULES_DIR to support user relative paths (#5390)

2025-12-03 17:21:07 +00:00

test_all_rules.py

[FR] Minor Typo Fixes (#5784)

2026-03-06 22:14:20 +00:00

test_gh_workflows.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

test_hunt_data.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

test_packages.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

test_python_library.py

[Bug] Add unit tests and fix Alert Suppression schema validation for ThresholdQueryRuleData (#5196)

2025-10-09 20:23:48 +00:00

test_rules_remote.py

[Bug] Ignore Other Keep Wildcards (#5792)

2026-03-09 23:35:13 +00:00

test_schemas.py

[FR] Add keep metadata check to esql schema test (#5441)

2026-01-14 21:05:04 +00:00

test_specific_rules.py

[Rule Tuning] Remove host.os.type Unit Test Exception (#5317)

2025-11-14 16:47:58 +00:00

test_toml_formatter.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

test_transform_fields.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

test_utils.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

test_version_locking.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00