I am trying to use the alert supression schema for a threshold rule but only the threshold field and value and cardinality field and value are showing up in elastic and not the alert supression, how do I add that into the toml file?
[rule.threshold]
field = ["field"]
value = 1
[[rule.threshold.cardinality]]
field = "field"
value = 250