github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 09:48:58 -04:00
Code Issues Projects Releases Packages Wiki Activity

[Telemetry][Security Solution] Always enrich telemetry documents with license info (#188832)

Browse source
This commit is contained in:
Sebastián Zaffarano 2024-07-26 11:02:56 +02:00 • committed by GitHub
parent 3f3713b567
commit 61ad27e863
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 8 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

25
x-pack/plugins/security_solution/server/lib/telemetry/async_sender.ts
View file

@ -276,28 +276,15 @@ export class AsyncTelemetryEventsSender implements IAsyncTelemetryEventsSender {
private enrich(event: Event): Event {
const clusterInfo = this.telemetryReceiver?.getClusterInfo();
// TODO(szaffarano): generalize the enrichment at channel level to not hardcode the logic here
if (typeof event.payload === 'object') {
let additional = {};
if (event.channel !== TelemetryChannel.TASK_METRICS) {
additional = {
cluster_name: clusterInfo?.cluster_name,
cluster_uuid: clusterInfo?.cluster_uuid,
};
} else {
additional = {
cluster_uuid: clusterInfo?.cluster_uuid,
};
}
if (event.channel === TelemetryChannel.ENDPOINT_ALERTS) {
const licenseInfo = this.telemetryReceiver?.getLicenseInfo();
additional = {
...additional,
...(licenseInfo ? { license: copyLicenseFields(licenseInfo) } : {}),
};
}
const licenseInfo = this.telemetryReceiver?.getLicenseInfo();
additional = {
cluster_name: clusterInfo?.cluster_name,
cluster_uuid: clusterInfo?.cluster_uuid,
...(licenseInfo ? { license: copyLicenseFields(licenseInfo) } : {}),
};
event.payload = {
...event.payload,

2
x-pack/test/security_solution_api_integration/test_suites/detections_response/utils/telemetry/remove_time_fields_from_telemetry_stats.ts
View file

@ -15,6 +15,8 @@ export const removeExtraFieldsFromTelemetryStats = (stats: any) => {
unset(value, `[${i}][${j}].start_time`);
unset(value, `[${i}][${j}].end_time`);
unset(value, `[${i}][${j}].cluster_uuid`);
unset(value, `[${i}][${j}].cluster_name`);
unset(value, `[${i}][${j}].license`);
});
});
});