Received error message below when trying to import rule to Elastic security.
"Cannot use 'in' operator to search for 'investigation_fields'
Has anyone encountered this before and anyone can advise on this?
Thank you
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Failed to installed pre-packaged rules from elastic | 4 | 1582 | March 12, 2020 | |
| Elastic Security Rule Error "failed to parse field [_index]" | 0 | 12 | December 9, 2024 | |
| 500 Internal server error on query_suggestion | 3 | 2138 | May 5, 2021 | |
| Security rule exception not working | 5 | 1297 | February 18, 2022 | |
| Xpack/sql Does not appear to be able to handle "IN" | 5 | 1035 | September 28, 2018 |