[Security Solution] {{state.signals_count}} Object not working (#156472…

…) (#156707) ## Summary Original ticket: #156472 These changes adds `{{state.signals_count}}` object to be available in message body for the `"For each alert"` option. (cherry picked from commit 99e5e38)
elastic · May 5, 2023 · 30432a9 · 30432a9
1 parent 0d6161a
commit 30432a9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/x-pack/plugins/rule_registry/server/utils/create_persistence_rule_type_wrapper.ts b/x-pack/plugins/rule_registry/server/utils/create_persistence_rule_type_wrapper.ts
@@ -188,6 +188,9 @@ export const createPersistenceRuleTypeWrapper: CreatePersistenceRuleTypeWrapper
                 createdAlerts.forEach((alert) =>
                   options.services.alertFactory
                     .create(alert._id)
+                    .replaceState({
+                      signals_count: 1,
+                    })
                     .scheduleActions(type.defaultActionGroupId, {
                       rule: mapKeys(snakeCase, {
                         ...options.params,
@@ -380,6 +383,9 @@ export const createPersistenceRuleTypeWrapper: CreatePersistenceRuleTypeWrapper
                 createdAlerts.forEach((alert) =>
                   options.services.alertFactory
                     .create(alert._id)
+                    .replaceState({
+                      signals_count: 1,
+                    })
                     .scheduleActions(type.defaultActionGroupId, {
                       rule: mapKeys(snakeCase, {
                         ...options.params,