Aggregation facility in the detections rules tab?

can we write aggregation in the detection rules tab?.
if not, is it a planned feature?

Hey again curiousmind!

This feature is currently under development -- you can reference this issue for tracking. :slightly_smiling_face:

Cheers!
Garrett