SIEM Rules Bulk duplicate

Elastic Security
1

Hey Community,

I want to apply the SIEM Rules on a custom Index. How can I do this with many Rules?
So manually I have to duplicate the original Rule and then I can edit the duplicated Rule.
I tried to do this with Kibana Rule API, but it seems way too complicated.

Thank you in advance.

1 Like
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.