Expand timestamp override tests (#1907)
* Expand timestamp_override tests * removed timestamp_override from eql sequence rules * add config entry for eql rules with beats index and t_o * add timestamp_override to missing fields
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
[metadata]
|
||||
creation_date = "2022/03/21"
|
||||
maturity = "production"
|
||||
updated_date = "2022/03/24"
|
||||
updated_date = "2022/03/31"
|
||||
|
||||
[rule]
|
||||
author = ["Elastic"]
|
||||
|
||||
Reference in New Issue
Block a user