Aggregation facility in the detections rules tab?

Elastic Security SIEM
1

can we write aggregation in the detection rules tab?.
if not, is it a planned feature?

1 Like
2

Hey again curiousmind!

This feature is currently under development -- you can reference this issue for tracking. :slightly_smiling_face:

Cheers!
Garrett

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.