When looking at SIEM > Rules & Detections > Rules Editor, I can see when I created a rule or updated it.
When looking to see when it last ran or when it will run next all I can find is this somewhat disappointing chart (image) which purports to show "Matches," "Rule Runs" and "Run Errors."
In the image above there's no hover - tool-tip or other info I can see to show me a timestamp of the rule run.
What is a definitive way to find the history of my runs per rule and when the rule is next scheduled to run?
thanks
Solved! Go to Solution.
Chris, I recommend you check the Detection API for what you want. The GetDetection method returns this information for you: