Eric Forte 6df3ec9bb5 [FR] Add keep metadata check to esql schema test (#5441) ...

* Add keep metadata check to esql schema test

* Update unit tests

* Allow for keep *

Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

---------

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

(cherry picked from commit 891aa8b6d5)

2026-01-14 21:07:40 +00:00

..

data

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 12:46:28 -07:00

kuery

[FR] Add white space checking for KQL parse (#3789)

2025-07-31 14:23:53 -04:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

base.py

[FR] Expand CUSTOM_RULES_DIR to support user relative paths (#5390)

2025-12-03 12:19:29 -05:00

test_all_rules.py

[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules (#5352)

2025-12-05 12:26:56 -06:00

test_gh_workflows.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_hunt_data.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_packages.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_python_library.py

[Bug] Add unit tests and fix Alert Suppression schema validation for ThresholdQueryRuleData (#5196)

2025-10-09 16:21:21 -04:00

test_rules_remote.py

[FR] Add keep metadata check to esql schema test (#5441)

2026-01-14 21:07:40 +00:00

test_schemas.py

[FR] Add keep metadata check to esql schema test (#5441)

2026-01-14 21:07:40 +00:00

test_specific_rules.py

[Rule Tuning] Remove host.os.type Unit Test Exception (#5317)

2025-11-14 08:46:24 -08:00

test_toml_formatter.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_transform_fields.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_utils.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_version_locking.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00