Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SIEM] Replace ad hoc ML queries with the ML Client #62223

Closed
rylnd opened this issue Apr 1, 2020 · 2 comments · Fixed by #65187
Closed

[SIEM] Replace ad hoc ML queries with the ML Client #62223

rylnd opened this issue Apr 1, 2020 · 2 comments · Fixed by #65187
Labels
Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:SIEM v7.8.0 v8.0.0

Comments

@rylnd
Copy link
Contributor

rylnd commented Apr 1, 2020

During development of ML Rules in 7.7 (#60301), code was added to query anomalies within the SIEM app. As the ML client was not available at that time, custom code was written (getAnomalies) to perform the query. Now that the ML client is available, we should switch to that.

@elasticmachine
Copy link
Contributor

Pinging @elastic/siem (Team:SIEM)

@spong spong mentioned this issue Apr 9, 2020
11 tasks
@MindyRS MindyRS added the Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. label Sep 23, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:SIEM v7.8.0 v8.0.0
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants