ruffle1986 removed a comment on issue #1334: METRON-1997: Replace Threat Triage Score Field Slider with Text Box URL: https://github.com/apache/metron/pull/1334#issuecomment-467881751 @merrimanr @nickwallen as we discussed earlier I removed `score` from the triage rule as it was a deprecated property but the server still responds with `400 Bad Request`. This is the request body I'm sending to the server (`/api/v1/sensor/enrichment/config/syslog5424`): ```json { "enrichment":{ "fieldMap":{ }, "fieldToTypeMap":{ }, "config":{ } }, "threatIntel":{ "fieldMap":{ }, "fieldToTypeMap":{ }, "config":{ }, "triageConfig":{ "riskLevelRules":[ { "name":"qwe", "comment":"", "rule":"match{ var1 < 10 => 'warn', var1 >= 10 => 'critical', default => 'info'}", "scoreExpression":"match{ var1 < 10 => 'warn', var1 >= 10 => 'critical', default => 'info'}" } ], "aggregator":"MAX", "aggregationConfig":{ } } } } ```
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
