[Security Solution] {{state.signals_count}} Object not working (elast…

…ic#156472) (elastic#156707) ## Summary Original ticket: elastic#156472 These changes adds `{{state.signals_count}}` object to be available in message body for the `"For each alert"` option.
kibanamachine · May 5, 2023 · 99e5e38 · 99e5e38
1 parent 29fe83f
commit 99e5e38
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/x-pack/plugins/rule_registry/server/utils/create_persistence_rule_type_wrapper.ts b/x-pack/plugins/rule_registry/server/utils/create_persistence_rule_type_wrapper.ts
@@ -188,6 +188,9 @@ export const createPersistenceRuleTypeWrapper: CreatePersistenceRuleTypeWrapper
                 createdAlerts.forEach((alert) =>
                   options.services.alertFactory
                     .create(alert._id)
+                    .replaceState({
+                      signals_count: 1,
+                    })
                     .scheduleActions(type.defaultActionGroupId, {
                       rule: mapKeys(snakeCase, {
                         ...options.params,
@@ -380,6 +383,9 @@ export const createPersistenceRuleTypeWrapper: CreatePersistenceRuleTypeWrapper
                 createdAlerts.forEach((alert) =>
                   options.services.alertFactory
                     .create(alert._id)
+                    .replaceState({
+                      signals_count: 1,
+                    })
                     .scheduleActions(type.defaultActionGroupId, {
                       rule: mapKeys(snakeCase, {
                         ...options.params,