[Bug] ES|QL Validation Add Reverse Lookup Check Against Kibana Value (#5747)

* Add reverse lookup check against Kibana value

---------

Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

detection_rules/rule_validators.py

@@ -818,6 +818,8 @@ class ESQLValidator(QueryValidator):
                 reverse_col_type = kql.parser.elasticsearch_type_family(column_type) if column_type else None
                 if reverse_col_type is not None and schema_type is not None and reverse_col_type == schema_type:
                     continue
+                if reverse_col_type is not None and reverse_col_type == column_type:
+                    continue
                 mismatched_columns.append(
                     f"Dynamic field `{column_name}` is not correctly mapped. "
                     f"If not dynamic: expected from schema: `{schema_type}`, got from Kibana: `{column_type}`."

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "detection_rules"
-version = "1.5.46"
+version = "1.5.47"
 description = "Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine."
 readme = "README.md"
 requires-python = ">=3.12"