Add eql rule type to ruleTypeMappings

elastic · Sep 14, 2021 · 9339cee · 9339cee
1 parent bc969c2
commit 9339cee
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/x-pack/plugins/security_solution/server/lib/detection_engine/signals/utils.ts b/x-pack/plugins/security_solution/server/lib/detection_engine/signals/utils.ts
@@ -63,6 +63,7 @@ import { WrappedRACAlert } from '../rule_types/types';
 import { SearchTypes } from '../../../../common/detection_engine/types';
 import { IRuleExecutionLogClient } from '../rule_execution_log/types';
 import {
+  EQL_RULE_TYPE_ID,
   INDICATOR_RULE_TYPE_ID,
   ML_RULE_TYPE_ID,
   QUERY_RULE_TYPE_ID,
@@ -1014,7 +1015,7 @@ export const getField = <T extends SearchTypes>(event: SimpleHit, field: string)
  * Maps legacy rule types to RAC rule type IDs.
  */
 export const ruleTypeMappings = {
-  eql: SIGNALS_ID,
+  eql: EQL_RULE_TYPE_ID,
   machine_learning: ML_RULE_TYPE_ID,
   query: QUERY_RULE_TYPE_ID,
   saved_query: SIGNALS_ID,