Skip to content

[FR] Include Timeline Templates export/import in the CLI such that they can be imported and exported together with rules like exceptions and action connectors #4588

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
frederikb96 opened this issue Apr 1, 2025 · 0 comments
Labels

Comments

@frederikb96
Copy link
Contributor

Repository Feature

None

Problem Description

Currently, timeline templates are referenced by id and name in the exported rule files. However, the tempalte itself is not exported/cannot be imported via the CLI.

This limitations is also mentioned in the DaC Documentation.

Desired Solution

The Kibana API exists.

Best would be to implement this analog to the exception lists and action connectors. I hope its possible to use the same concepts and just adapt the code to the Timeline Template API.

Considered Alternatives

No response

Additional Context

This feature is essential for our DaC workflows for customer projects, so we are thinking about taking a look at the code base and checking if we can contribute to this, in case there are currently no plans of implementing this by elastic.

Thus, I wanted to ask if there are already some plans for this or if there has already been progress in the background or anything 🙂

@frederikb96 frederikb96 added enhancement New feature or request Team: TRADE labels Apr 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant