# Installing all of the Rules from GitHub

**URL:** <https://discuss.elastic.co/t/installing-all-of-the-rules-from-github/259304>\
**Category:** Endpoint Security\
**Created:** [December 21, 2020, 9:19pm UTC](https://discuss.elastic.co/t/installing-all-of-the-rules-from-github/259304 "2020-12-21T21:19:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![AirJordan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/airjordan/32/46017_2.png) [@AirJordan](https://discuss.elastic.co/u/AirJordan)\
**Post date:** [December 21, 2020, 9:19pm UTC](https://discuss.elastic.co/t/installing-all-of-the-rules-from-github/259304/1 "2020-12-21T21:19:52Z")

</div>

I see there is a [https://github.com/elastic/detection-rules](https://github.com/elastic/detection-rules). It seems like when I installed Endpoint Security and did generate rules it created a lot of the rules. Yeah some are still missing. Is there a way to get the lists synched up instead of cloning the repo and then one by one importing into Kibana the rules? If we have to download the files is there a command to just mass upload them or would that create overlapping duplicate rules?

---

<div class="post-metadata">

**Author:** ![devonkerr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/devonkerr/32/56711_2.png) [@devonkerr](https://discuss.elastic.co/u/devonkerr)\
**Post date:** [December 22, 2020, 2:28pm UTC](https://discuss.elastic.co/t/installing-all-of-the-rules-from-github/259304/2 "2020-12-22T14:28:28Z")

</div>

Hello, it sounds like getting all the rules that have merged in detection-rules uploaded en masse is one of your objectives. Fortunately the detection-rules CLI offers a way to import a directory of rules, described [here](https://github.com/elastic/detection-rules/blob/main/CLI.md). Use the import-rules method with the "-d" flag, and note that we occasionally merge rules which require features released in an upcoming GA build. If you're importing rules from main this is less likely to occur, generally speaking.

---

<div class="post-metadata">

**Author:** ![AirJordan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/airjordan/32/46017_2.png) [@AirJordan](https://discuss.elastic.co/u/AirJordan)\
**Post date:** [December 22, 2020, 7:25pm UTC](https://discuss.elastic.co/t/installing-all-of-the-rules-from-github/259304/3 "2020-12-22T19:25:41Z")

</div>

I think I am doing something wrong. I would like to get the files into kibana as rules. When I look over the documentation it says -d for import\_rules but doesn't include any information about elastic or kibana. That is under the upload\_rules which doesn't have the -d options. So at this point I have done a git-clone have the files all set from the detection rules git page. I did the pip install requirements. Now I would like all the rules to be brought up into Kibana.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 19, 2021, 9:25pm UTC](https://discuss.elastic.co/t/installing-all-of-the-rules-from-github/259304/4 "2021-01-19T21:25:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.