Expand timestamp override tests (#1907)

* Expand timestamp_override tests
* removed timestamp_override from eql sequence rules
* add config entry for eql rules with beats index and t_o
* add timestamp_override to missing fields
This commit is contained in:
Justin Ibarra
2022-04-01 15:27:08 -08:00
committed by GitHub
parent 648daf1237
commit 6bdfddac8e
233 changed files with 1695 additions and 731 deletions
+2 -2
View File
@@ -18,9 +18,9 @@ class BaseRuleTest(unittest.TestCase):
@classmethod
def setUpClass(cls):
rc = RuleCollection.default()
cls.all_rules = rc
cls.all_rules = rc.rules
cls.rule_lookup = rc.id_map
cls.production_rules = cls.all_rules.filter(production_filter)
cls.production_rules = rc.filter(production_filter)
cls.deprecated_rules: DeprecatedCollection = rc.deprecated
@staticmethod