We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2aaeae6 commit 2ee3f67Copy full SHA for 2ee3f67
detection_rules/rule_validators.py
@@ -791,6 +791,11 @@ def validate_columns_index_mapping(
791
schema_type = utils.get_column_from_index_mapping_schema(keys, combined_mappings)
792
schema_type = kql.parser.elasticsearch_type_family(schema_type) if schema_type else None
793
794
+ # The mapping between integer and long may be different between Kibana and the schema
795
+ # both are numeric types with different ranges, but for our purposes they are equivalent
796
+ if column_type == "long" and schema_type == "integer":
797
+ continue
798
+
799
# Validate the type
800
if not schema_type or column_type != schema_type:
801
mismatched_columns.append(
0 commit comments