+12https://cloud.google.com/chronicle/docs/detection/rule-chaining?hl=en#single_event_detection_rules
Has anyone worked with this function? I did open a ticket, when I create the consumer rule I am seeing this error
parsing: error with token: "detection" detection source is not supported
Best answer by suzhuang
Rule chaining (now named as Composite Detections) is only available in private preview, it will soon be available in public preview next month.
+6Rule chaining (now named as Composite Detections) is only available in private preview, it will soon be available in public preview next month.
+1Hi @suzhuang ,
Is 'rule chaining' available now?
Or is there a specific release date planned?
Cause I faced the same error too.
Thanks!
+6Hi everyone, Composite Detections public preview (formally known as rule chaining) will be available in a few days, I will post an update here once the public preview is ready in the next few days. I would love to hear from everyone on what your use cases are to see if we can better assist you.
+12Hi everyone, Composite Detections public preview (formally known as rule chaining) will be available in a few days, I will post an update here once the public preview is ready in the next few days. I would love to hear from everyone on what your use cases are to see if we can better assist you.
One use case that we have has to do with discovery. We have host discovery and AD discovery rules. Alone, they are noisy.
+12Hi everyone, Composite Detections public preview (formally known as rule chaining) will be available in a few days, I will post an update here once the public preview is ready in the next few days. I would love to hear from everyone on what your use cases are to see if we can better assist you.
Any update on this?
+12Composite Detections has just been released for Public Preview
https://cloud.google.com/chronicle/docs/detection/composite-detections
+23It will be a few days before you see it populating within tenants, so please be patient. More content will be posted on how to leverage it further.
+2It will be a few days before you see it populating within tenants, so please be patient. More content will be posted on how to leverage it further.
Can't wait! 🌟
+12It will be a few days before you see it populating within tenants, so please be patient. More content will be posted on how to leverage it further.
Anything on this? As of today, we are still not seeing this feature
+6Anything on this? As of today, we are still not seeing this feature
Thank you all for your continued patience regarding this! Our team is actively working on enabling the feature. We experienced a delay in parts of the process due to RSA, but you should be able to use the feature within the next 24-48 hours.
+23Anything on this? As of today, we are still not seeing this feature
I checked my production tenant and it is now there.
+12Thank you all for your continued patience regarding this! Our team is actively working on enabling the feature. We experienced a delay in parts of the process due to RSA, but you should be able to use the feature within the next 24-48 hours.
ok, thank you!
+6ok, thank you!
would love to hear about your overall experience with using it! If there's anything we can help, feel free to respond to this post!
+6Can't wait! 🌟
Would love to hear about your experience using it!
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
