diff --git a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts index e3acea3b1d613..6507a94392ddd 100644 --- a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts +++ b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/constants.ts @@ -59,6 +59,7 @@ export const SUPPRESSIBLE_ALERT_RULES_GA: Type[] = [ 'new_terms', 'threat_match', 'machine_learning', + 'eql', ]; export const RISK_SCORE_LOW = 21; diff --git a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts index be0b6ce9c2927..78e8b9c5399ad 100644 --- a/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts +++ b/x-pack/solutions/security/plugins/security_solution/common/detection_engine/utils.test.ts @@ -255,10 +255,7 @@ describe('Alert Suppression Rules', () => { expect(isSuppressionRuleInGA('threat_match')).toBe(true); expect(isSuppressionRuleInGA('new_terms')).toBe(true); expect(isSuppressionRuleInGA('machine_learning')).toBe(true); - }); - - test('should return false for rule type suppression in tech preview', () => { - expect(isSuppressionRuleInGA('eql')).toBe(false); + expect(isSuppressionRuleInGA('eql')).toBe(true); }); }); describe('isSuppressionRuleConfiguredWithDuration', () => { diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression.cy.ts index 8f4b6a10faeb8..264d0a264f2ea 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression.cy.ts @@ -29,7 +29,6 @@ import { SUPPRESS_FOR_DETAILS, SUPPRESS_BY_DETAILS, SUPPRESS_MISSING_FIELD, - DETAILS_TITLE, } from '../../../../screens/rule_details'; const SUPPRESS_BY_FIELDS = ['agent.type']; @@ -71,9 +70,6 @@ describe( 'have.text', 'Suppress and group alerts for events with missing fields' ); - - // suppression functionality should be under Tech Preview - cy.contains(DETAILS_TITLE, SUPPRESS_FOR_DETAILS).contains('Technical Preview'); }); fillAboutRuleMinimumAndContinue(rule); diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_ess_basic.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_ess_basic.cy.ts index a9ebc451c3e08..76917e996fbf0 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_ess_basic.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_ess_basic.cy.ts @@ -21,7 +21,6 @@ import { SUPPRESS_FOR_DETAILS, SUPPRESS_BY_DETAILS, SUPPRESS_MISSING_FIELD, - DETAILS_TITLE, ALERT_SUPPRESSION_INSUFFICIENT_LICENSING_ICON, } from '../../../../screens/rule_details'; import { startBasicLicense } from '../../../../tasks/api_calls/licensing'; @@ -77,9 +76,6 @@ describe( 'have.text', 'Do not suppress alerts for events with missing fields' ); - - // suppression functionality should be under Tech Preview - cy.contains(DETAILS_TITLE, SUPPRESS_FOR_DETAILS).contains('Technical Preview'); }); // Platinum license is required for configuration to apply diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_sequence.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_sequence.cy.ts index 66cb4e3562a83..399d0fd6f003f 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_sequence.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/rule_creation/eql_rule_suppression_sequence.cy.ts @@ -29,7 +29,6 @@ import { SUPPRESS_FOR_DETAILS, SUPPRESS_BY_DETAILS, SUPPRESS_MISSING_FIELD, - DETAILS_TITLE, } from '../../../../screens/rule_details'; const SUPPRESS_BY_FIELDS = ['agent.type']; @@ -70,9 +69,6 @@ describe( 'have.text', 'Suppress and group alerts for events with missing fields' ); - - // suppression functionality should be under Tech Preview - cy.contains(DETAILS_TITLE, SUPPRESS_FOR_DETAILS).contains('Technical Preview'); }); fillAboutRuleMinimumAndContinue(rule);