lc_validate_replay_rule
Validates detection and response rules by replaying them against minimal events in a dry-run mode to confirm correctness without impacting real data.
Instructions
Validate a D&R rule through Replay using a dry-run minimal event.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| oid | Yes | ||
| trace | No | ||
| limit_evals | No | ||
| limit_events | No | ||
| rule_content | Yes |