Rule chaining (now named as Composite Detections) is only available in private preview, it will soon be available in public preview next month.

thank you! 

Hi @suzhuang ,

Is 'rule chaining' available now?

Or is there a specific release date planned?

Cause I faced the same error too.

Thanks!

I am also interested in rule chaining and expected date for GA. Thanks all! 

Hi everyone, Composite Detections public preview (formally known as rule chaining) will be available in a few days, I will post an update here once the public preview is ready in the next few days. I would love to hear from everyone on what your use cases are to see if we can better assist you.

One use case that we have has to do with discovery. We have host discovery and AD discovery rules. Alone, they are noisy. 

Any update on this?

Composite Detections has just been released for Public Preview

https://cloud.google.com/chronicle/docs/detection/composite-detections

It will be a few days before you see it populating within tenants, so please be patient. More content will be posted on how to leverage it further.

Can't wait! 🌟

Anything on this? As of today, we are still not seeing this feature

Thank you all for your continued patience regarding this! Our team is actively working on enabling the feature. We experienced a delay in parts of the process due to RSA, but you should be able to use the feature within the next 24-48 hours.

I checked my production tenant and it is now there. 

ok, thank you!

would love to hear about your overall experience with using it! If there's anything we can help, feel free to respond to this post! 

Would love to hear about your experience using it!