diff --git a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts index e3acea3b1d613..6507a94392ddd 100644 --- a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts +++ b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts @@ -59,6 +59,7 @@ export const SUPPRESSIBLE_ALERT_RULES_GA: Type[] = [ 'new_terms', 'threat_match', 'machine_learning', + 'eql', ]; export const RISK_SCORE_LOW = 21; diff --git a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts index be0b6ce9c2927..78e8b9c5399ad 100644 --- a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts +++ b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts @@ -255,10 +255,7 @@ describe('Alert Suppression Rules', () => { expect(isSuppressionRuleInGA('threat_match')).toBe(true); expect(isSuppressionRuleInGA('new_terms')).toBe(true); expect(isSuppressionRuleInGA('machine_learning')).toBe(true); - }); - - test('should return false for rule type suppression in tech preview', () => { - expect(isSuppressionRuleInGA('eql')).toBe(false); + expect(isSuppressionRuleInGA('eql')).toBe(true); }); }); describe('isSuppressionRuleConfiguredWithDuration', () => { diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/basic_license_check_rule_details.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/basic_license_check_rule_details.cy.ts index 176af020ac052..5e073e85225bf 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/basic_license_check_rule_details.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/basic_license_check_rule_details.cy.ts @@ -13,7 +13,6 @@ import { SUPPRESS_MISSING_FIELD, DEFINITION_DETAILS, ALERT_SUPPRESSION_INSUFFICIENT_LICENSING_ICON, - DETAILS_TITLE, } from '../../../../screens/rule_details'; import { startBasicLicense } from '../../../../tasks/api_calls/licensing'; @@ -94,9 +93,6 @@ describe( 'have.text', 'Do not suppress alerts for events with missing fields' ); - - // suppression functionality should be under Tech Preview - cy.contains(DETAILS_TITLE, SUPPRESS_FOR_DETAILS).contains('Technical Preview'); }); // Platinum license is required for configuration to apply diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_rule.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_rule.cy.ts index 9f9abceaad182..48faf9a0813e2 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_rule.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_rule.cy.ts @@ -29,7 +29,6 @@ import { SUPPRESS_FOR_DETAILS, SUPPRESS_BY_DETAILS, SUPPRESS_MISSING_FIELD, - DETAILS_TITLE, } from '../../../../screens/rule_details'; const SUPPRESS_BY_FIELDS = ['agent.type']; @@ -71,9 +70,6 @@ describe( 'have.text', 'Suppress and group alerts for events with missing fields' ); - - // suppression functionality should be under Tech Preview - cy.contains(DETAILS_TITLE, SUPPRESS_FOR_DETAILS).contains('Technical Preview'); }); fillAboutRuleMinimumAndContinue(rule); diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_sequence_rule.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_sequence_rule.cy.ts index e1aa965ae38cc..8b7087107f579 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_sequence_rule.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/alert_suppression/eql_sequence_rule.cy.ts @@ -29,7 +29,6 @@ import { SUPPRESS_FOR_DETAILS, SUPPRESS_BY_DETAILS, SUPPRESS_MISSING_FIELD, - DETAILS_TITLE, } from '../../../../screens/rule_details'; const SUPPRESS_BY_FIELDS = ['agent.type']; @@ -68,9 +67,6 @@ describe( 'have.text', 'Suppress and group alerts for events with missing fields' ); - - // suppression functionality should be under Tech Preview - cy.contains(DETAILS_TITLE, SUPPRESS_FOR_DETAILS).contains('Technical Preview'); }); fillAboutRuleMinimumAndContinue(rule);