diff --git a/.buildkite/ftr_oblt_serverless_configs.yml b/.buildkite/ftr_oblt_serverless_configs.yml index cf1975d91e7b..33ff3a3337c5 100644 --- a/.buildkite/ftr_oblt_serverless_configs.yml +++ b/.buildkite/ftr_oblt_serverless_configs.yml @@ -44,4 +44,4 @@ enabled: - x-pack/test/api_integration/deployment_agnostic/configs/serverless/oblt.apm.serverless.config.ts - x-pack/test/api_integration/deployment_agnostic/configs/serverless/oblt.synthetics.serverless.config.ts - x-pack/test/api_integration/deployment_agnostic/configs/serverless/oblt.streams.serverless.config.ts - - x-pack/test/api_integration/deployment_agnostic/feature_flag_configs/serverless/oblt.synthetics.serverless.config.ts + - x-pack/test/api_integration/deployment_agnostic/feature_flag_configs/serverless/oblt.serverless.config.ts diff --git a/.buildkite/ftr_oblt_stateful_configs.yml b/.buildkite/ftr_oblt_stateful_configs.yml index c6b39bea2354..d27dc531a92e 100644 --- a/.buildkite/ftr_oblt_stateful_configs.yml +++ b/.buildkite/ftr_oblt_stateful_configs.yml @@ -48,4 +48,4 @@ enabled: - x-pack/test/api_integration/deployment_agnostic/configs/stateful/oblt.stateful.config.ts - x-pack/test/api_integration/deployment_agnostic/configs/stateful/oblt.apm.stateful.config.ts - x-pack/test/api_integration/deployment_agnostic/configs/stateful/oblt.ai_assistant.stateful.config.ts - - x-pack/test/api_integration/deployment_agnostic/feature_flag_configs/stateful/oblt.synthetics.stateful.config.ts + - x-pack/test/api_integration/deployment_agnostic/feature_flag_configs/stateful/oblt.stateful.config.ts diff --git a/config/serverless.oblt.complete.yml b/config/serverless.oblt.complete.yml index 8d677648b0ad..58bddccef8b2 100644 --- a/config/serverless.oblt.complete.yml +++ b/config/serverless.oblt.complete.yml @@ -5,59 +5,5 @@ xpack.infra.enabled: true xpack.slo.enabled: true xpack.features.overrides: -### Applications feature privileges are fine-tuned to grant access to Logs, and Observability apps. - apm: - ### By default, this feature named as `APM and User Experience`, but should be renamed to `Applications`. - name: "Applications" - privileges: - # Infrastructure's `All` feature privilege should implicitly grant `All` access to Logs and Observability apps. - all.composedOf: - - feature: "logs" - privileges: [ "all" ] - - feature: "observability" - privileges: [ "all" ] - # Infrastructure's `Read` feature privilege should implicitly grant `Read` access to Logs and Observability apps. - read.composedOf: - - feature: "logs" - privileges: [ "read" ] - - feature: "observability" - privileges: [ "read" ] - ### Fleet feature privileges are fine-tuned to grant access to Logs app. - fleetv2: - privileges: - # Fleet `All` feature privilege should implicitly grant `All` access to Logs app. - all.composedOf: - - feature: "logs" - privileges: [ "all" ] - # Fleet `Read` feature privilege should implicitly grant `Read` access to Logs app. - read.composedOf: - - feature: "logs" - privileges: [ "read" ] - infrastructure: - ### By default, this feature named as `Metrics`, but should be renamed to `Infrastructure`. - name: "Infrastructure" - privileges: - # Infrastructure's `All` feature privilege should implicitly grant `All` access to Logs and Observability apps. - all.composedOf: - - feature: "logs" - privileges: [ "all" ] - - feature: "observability" - privileges: [ "all" ] - # Infrastructure's `Read` feature privilege should implicitly grant `Read` access to Logs and Observability apps. - read.composedOf: - - feature: "logs" - privileges: [ "read" ] - - feature: "observability" - privileges: [ "read" ] - ### Logs feature is hidden in Role management since it's automatically granted by either Infrastructure, or Applications features. - logs.hidden: true - slo: - privileges: - # SLOs `All` feature privilege should implicitly grant `All` access to Observability app. - all.composedOf: - - feature: "observability" - privileges: [ "all" ] - # SLOs `Read` feature privilege should implicitly grant `Read` access to Observability app. - read.composedOf: - - feature: "observability" - privileges: [ "read" ] \ No newline at end of file + ### By default, this feature named as `Metrics`, but should be renamed to `Infrastructure`. + infrastructure.name: 'Infrastructure' diff --git a/config/serverless.oblt.yml b/config/serverless.oblt.yml index 6cd84a568de3..6a4108ef34ff 100644 --- a/config/serverless.oblt.yml +++ b/config/serverless.oblt.yml @@ -14,54 +14,21 @@ xpack.ux.enabled: false xpack.legacy_uptime.enabled: false xpack.features.overrides: + ### By default, this feature named as `APM and User Experience`, but should be renamed to `Applications`. + apm.name: 'Applications' ### Dashboards feature should be moved from Analytics category to the Observability one. - dashboard_v2.category: "observability" + dashboard_v2.category: 'observability' ### Discover feature should be moved from Analytics category to the Observability one and its privileges are ### fine-tuned to grant access to Observability app. - discover: - privileges: - # Discover `All` feature privilege should implicitly grant `All` access to Observability app. - all.composedOf: - - feature: "observability" - privileges: [ "all" ] - # Discover `Read` feature privilege should implicitly grant `Read` access to Observability app. - read.composedOf: - - feature: "observability" - privileges: [ "read" ] - discover_v2: - category: "observability" - privileges: - # Discover `All` feature privilege should implicitly grant `All` access to Observability app. - all.composedOf: - - feature: "observability" - privileges: [ "all" ] - # Discover `Read` feature privilege should implicitly grant `Read` access to Observability app. - read.composedOf: - - feature: "observability" - privileges: [ "read" ] + discover_v2.category: 'observability' ### Machine Learning feature should be moved from Analytics category to the Observability one and renamed to `AI Ops`. ml: - category: "observability" + category: 'observability' order: 1200 - ### Observability feature is hidden in Role management since it's automatically granted by either Discover, - ### Infrastructure, Applications, Synthetics, or SLOs features. - observability.hidden: true ### Stack alerts is hidden in Role management since it's not needed. stackAlerts.hidden: true - ### Synthetics feature privileges are fine-tuned to grant access to Observability app. - uptime: - ### By default, this feature named as `Synthetics and Uptime`, but should be renamed to `Synthetics` since `Uptime` is not available. - name: "Synthetics" - privileges: - # Synthetics `All` feature privilege should implicitly grant `All` access to Observability app. - all.composedOf: - - feature: "observability" - privileges: [ "all" ] - # Synthetics `Read` feature privilege should implicitly grant `Read` access to Observability app. - read.composedOf: - - feature: "observability" - privileges: [ "read" ] - + ### By default, this feature named as `Synthetics and Uptime`, but should be renamed to `Synthetics` since `Uptime` is not available. + uptime.name: 'Synthetics' ## Cloud settings xpack.cloud.serverless.project_type: observability @@ -81,11 +48,6 @@ xpack.fleet.agentIdVerificationEnabled: false ## Enable event.ingested separately because agentIdVerification is disabled xpack.fleet.eventIngestedEnabled: true -## Enable the capability for the observability feature ID in the serverless environment to take ownership of the rules. -## The value need to be a featureId observability Or stackAlerts Or siem -xpack.alerting.rules.overwriteProducer: 'observability' -xpack.observability.createO11yGenericFeatureId: true - ## APM Serverless Onboarding flow xpack.apm.serverlessOnboarding: true @@ -140,8 +102,8 @@ xpack.apm.featureFlags.sourcemapApiAvailable: false xpack.apm.featureFlags.storageExplorerAvailable: false ## Set the AI Assistant type -aiAssistantManagementSelection.preferredAIAssistantType: "observability" -xpack.observabilityAIAssistant.scope: "observability" +aiAssistantManagementSelection.preferredAIAssistantType: 'observability' +xpack.observabilityAIAssistant.scope: 'observability' # Specify in telemetry the project type telemetry.labels.serverless: observability diff --git a/src/platform/packages/shared/kbn-rule-data-utils/src/alerts_as_data_rbac.ts b/src/platform/packages/shared/kbn-rule-data-utils/src/alerts_as_data_rbac.ts index 2985fca76d27..bbe5ab0def03 100644 --- a/src/platform/packages/shared/kbn-rule-data-utils/src/alerts_as_data_rbac.ts +++ b/src/platform/packages/shared/kbn-rule-data-utils/src/alerts_as_data_rbac.ts @@ -33,6 +33,7 @@ export const AlertConsumers = { DISCOVER: 'discover', } as const; export type AlertConsumers = (typeof AlertConsumers)[keyof typeof AlertConsumers]; +export const DEPRECATED_ALERTING_CONSUMERS = [AlertConsumers.OBSERVABILITY]; export type STATUS_VALUES = 'open' | 'acknowledged' | 'closed' | 'in-progress'; // TODO: remove 'in-progress' after migration to 'acknowledged' export type ValidFeatureId = AlertConsumers; diff --git a/src/platform/packages/shared/response-ops/rule_form/src/create_rule_form.tsx b/src/platform/packages/shared/response-ops/rule_form/src/create_rule_form.tsx index 79aaca242cc8..f7b1f579d52a 100644 --- a/src/platform/packages/shared/response-ops/rule_form/src/create_rule_form.tsx +++ b/src/platform/packages/shared/response-ops/rule_form/src/create_rule_form.tsx @@ -46,7 +46,6 @@ export interface CreateRuleFormProps { canShowConsumerSelection?: boolean; showMustacheAutocompleteSwitch?: boolean; isFlyout?: boolean; - isServerless?: boolean; onCancel?: () => void; onSubmit?: (ruleId: string) => void; onChangeMetaData?: (metadata?: RuleTypeMetaData) => void; @@ -67,7 +66,6 @@ export const CreateRuleForm = (props: CreateRuleFormProps) => { canShowConsumerSelection = true, showMustacheAutocompleteSwitch = false, isFlyout, - isServerless = false, onCancel, onSubmit, onChangeMetaData, @@ -213,7 +211,6 @@ export const CreateRuleForm = (props: CreateRuleFormProps) => { validConsumers, ruleType, ruleTypes, - isServerless, }), }} > diff --git a/src/platform/packages/shared/response-ops/rule_form/src/rule_form.tsx b/src/platform/packages/shared/response-ops/rule_form/src/rule_form.tsx index 9595e85f872c..6b107da59128 100644 --- a/src/platform/packages/shared/response-ops/rule_form/src/rule_form.tsx +++ b/src/platform/packages/shared/response-ops/rule_form/src/rule_form.tsx @@ -41,7 +41,6 @@ export interface RuleFormProps>; initialMetadata?: MetaData; - isServerless?: boolean; } export const RuleForm = ( @@ -66,7 +65,6 @@ export const RuleForm = ( showMustacheAutocompleteSwitch, initialValues, initialMetadata, - isServerless, } = props; const { @@ -147,7 +145,6 @@ export const RuleForm = ( showMustacheAutocompleteSwitch={showMustacheAutocompleteSwitch} initialValues={initialValues} initialMetadata={initialMetadata} - isServerless={isServerless} /> ); } @@ -179,7 +176,6 @@ export const RuleForm = ( ruleTypeRegistry, actionTypeRegistry, contentManagement, - isServerless, id, ruleTypeId, validConsumers, diff --git a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.test.ts b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.test.ts new file mode 100644 index 000000000000..4786865b28fd --- /dev/null +++ b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.test.ts @@ -0,0 +1,82 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the "Elastic License + * 2.0", the "GNU Affero General Public License v3.0 only", and the "Server Side + * Public License v 1"; you may not use this file except in compliance with, at + * your election, the "Elastic License 2.0", the "GNU Affero General Public + * License v3.0 only", or the "Server Side Public License, v 1". + */ + +import { AlertConsumers, DEPRECATED_ALERTING_CONSUMERS } from '@kbn/rule-data-utils'; +import { getAuthorizedConsumers } from './get_authorized_consumers'; +import type { RuleTypeWithDescription } from '../common/types'; +import type { RuleCreationValidConsumer } from '@kbn/rule-data-utils'; + +describe('getAuthorizedConsumers', () => { + // @ts-ignore + const mockValidConsumers = ['consumer1', 'consumer2'] as RuleCreationValidConsumer[]; + + it('should return authorized consumers that have "all" privileges and are valid', () => { + const mockRuleType: RuleTypeWithDescription = { + authorizedConsumers: { + consumer1: { all: true }, + consumer2: { all: false }, + consumer3: { all: true }, + }, + } as unknown as RuleTypeWithDescription; + + const result = getAuthorizedConsumers({ + ruleType: mockRuleType, + validConsumers: mockValidConsumers, + }); + + expect(result).toEqual(['consumer1']); + }); + + it('should filter out deprecated consumers', () => { + const mockRuleType: RuleTypeWithDescription = { + authorizedConsumers: { + [AlertConsumers.OBSERVABILITY]: { all: true }, + consumer1: { all: true }, + }, + } as unknown as RuleTypeWithDescription; + + const result = getAuthorizedConsumers({ + ruleType: mockRuleType, + validConsumers: [...mockValidConsumers, ...DEPRECATED_ALERTING_CONSUMERS], + }); + + expect(result).toEqual(['consumer1']); + }); + + it('should return an empty array if no consumers have "all" privileges', () => { + const mockRuleType: RuleTypeWithDescription = { + authorizedConsumers: { + consumer1: { all: false }, + consumer2: { all: false }, + }, + } as unknown as RuleTypeWithDescription; + + const result = getAuthorizedConsumers({ + ruleType: mockRuleType, + validConsumers: mockValidConsumers, + }); + + expect(result).toEqual([]); + }); + + it('should return an empty array if no valid consumers are authorized', () => { + const mockRuleType: RuleTypeWithDescription = { + authorizedConsumers: { + consumer3: { all: true }, + }, + } as unknown as RuleTypeWithDescription; + + const result = getAuthorizedConsumers({ + ruleType: mockRuleType, + validConsumers: mockValidConsumers, + }); + + expect(result).toEqual([]); + }); +}); diff --git a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.ts b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.ts index 17ddaf5f59fd..bf503334903b 100644 --- a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.ts +++ b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_authorized_consumers.ts @@ -8,6 +8,7 @@ */ import type { RuleCreationValidConsumer } from '@kbn/rule-data-utils'; +import { DEPRECATED_ALERTING_CONSUMERS } from '@kbn/rule-data-utils'; import type { RuleTypeWithDescription } from '../common/types'; export const getAuthorizedConsumers = ({ @@ -17,8 +18,8 @@ export const getAuthorizedConsumers = ({ ruleType: RuleTypeWithDescription; validConsumers: RuleCreationValidConsumer[]; }) => { - return Object.entries(ruleType.authorizedConsumers).reduce( - (result, [authorizedConsumer, privilege]) => { + return Object.entries(ruleType.authorizedConsumers) + .reduce((result, [authorizedConsumer, privilege]) => { if ( privilege.all && validConsumers.includes(authorizedConsumer as RuleCreationValidConsumer) @@ -26,7 +27,11 @@ export const getAuthorizedConsumers = ({ result.push(authorizedConsumer as RuleCreationValidConsumer); } return result; - }, - [] - ); + }, []) + .filter((consumer) => { + // Filter out deprecated alerting consumers + return !(DEPRECATED_ALERTING_CONSUMERS as RuleCreationValidConsumer[]).includes( + consumer as RuleCreationValidConsumer + ); + }); }; diff --git a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.test.ts b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.test.ts index 1d3f38e7d5f3..5400376e52c3 100644 --- a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.test.ts +++ b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.test.ts @@ -47,37 +47,7 @@ describe('getInitialMultiConsumer', () => { } as RuleTypeWithDescription; const ruleTypes = [ - { - id: '.es-query', - name: 'Test', - actionGroups: [ - { - id: 'testActionGroup', - name: 'Test Action Group', - }, - { - id: 'recovered', - name: 'Recovered', - }, - ], - defaultActionGroupId: 'testActionGroup', - minimumLicenseRequired: 'basic', - recoveryActionGroup: { - id: 'recovered', - }, - producer: 'logs', - authorizedConsumers: { - alerting: { read: true, all: true }, - test: { read: true, all: true }, - stackAlerts: { read: true, all: true }, - logs: { read: true, all: true }, - }, - actionVariables: { - params: [], - state: [], - }, - enabledInLicense: true, - }, + ruleType, { enabledInLicense: true, recoveryActionGroup: { @@ -108,13 +78,12 @@ describe('getInitialMultiConsumer', () => { test('should return null when rule type id does not match', () => { const res = getInitialMultiConsumer({ multiConsumerSelection: null, - validConsumers: ['logs', 'observability'], + validConsumers: ['logs'], ruleType: { ...ruleType, id: 'test', }, ruleTypes, - isServerless: false, }); expect(res).toBe(null); @@ -126,7 +95,6 @@ describe('getInitialMultiConsumer', () => { validConsumers: [], ruleType, ruleTypes, - isServerless: false, }); expect(res).toBe(null); @@ -138,7 +106,6 @@ describe('getInitialMultiConsumer', () => { validConsumers: ['alerts'], ruleType, ruleTypes, - isServerless: false, }); expect(res).toBe('alerts'); @@ -147,25 +114,49 @@ describe('getInitialMultiConsumer', () => { test('should not return observability consumer for non serverless', () => { const res = getInitialMultiConsumer({ multiConsumerSelection: null, - validConsumers: ['logs', 'infrastructure', 'observability'], + validConsumers: ['logs', 'infrastructure'], ruleType, ruleTypes, - isServerless: false, }); expect(res).toBe('logs'); }); - test('should return observability consumer for serverless', () => { + test('should return valid consumer when user has only logs privileges', () => { const res = getInitialMultiConsumer({ multiConsumerSelection: null, - validConsumers: ['logs', 'infrastructure', 'observability'], - ruleType, + validConsumers: ['infrastructure', 'logs'], + ruleType: { + ...ruleType, + authorizedConsumers: { + logs: { read: true, all: true }, + }, + }, ruleTypes, - isServerless: true, }); - expect(res).toBe('observability'); + expect(res).toBe('logs'); + }); + + test('should return valid consumer when user has only infrastructure privileges', () => { + const res = getInitialMultiConsumer({ + multiConsumerSelection: null, + validConsumers: ['infrastructure', 'logs'], + ruleType: { + ...ruleType, + authorizedConsumers: { + infrastructure: { read: true, all: true }, + }, + }, + ruleTypes: ruleTypes.map((rule) => ({ + ...rule, + authorizedConsumers: { + infrastructure: { read: true, all: true }, + }, + })), + }); + + expect(res).toBe('infrastructure'); }); test('should return null when there is no authorized consumers', () => { @@ -177,7 +168,6 @@ describe('getInitialMultiConsumer', () => { authorizedConsumers: {}, }, ruleTypes, - isServerless: false, }); expect(res).toBe(null); @@ -194,7 +184,6 @@ describe('getInitialMultiConsumer', () => { }, }, ruleTypes, - isServerless: false, }); expect(res).toBe(null); @@ -211,7 +200,6 @@ describe('getInitialMultiConsumer', () => { }, }, ruleTypes, - isServerless: false, }); expect(res).toBe('logs'); @@ -226,7 +214,6 @@ describe('getInitialMultiConsumer', () => { authorizedConsumers: {}, }, ruleTypes, - isServerless: false, }); expect(res).toBe('stackAlerts'); @@ -241,7 +228,6 @@ describe('getInitialMultiConsumer', () => { authorizedConsumers: {}, }, ruleTypes: [], - isServerless: false, }); expect(res).toBe(null); diff --git a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.ts b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.ts index a560d57bd686..f05aa051d9f8 100644 --- a/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.ts +++ b/src/platform/packages/shared/response-ops/rule_form/src/utils/get_initial_multi_consumer.ts @@ -36,13 +36,11 @@ export const getInitialMultiConsumer = ({ validConsumers, ruleType, ruleTypes, - isServerless, }: { multiConsumerSelection?: RuleCreationValidConsumer | null; validConsumers: RuleCreationValidConsumer[]; ruleType: RuleTypeWithDescription; ruleTypes: RuleTypeWithDescription[]; - isServerless?: boolean; }): RuleCreationValidConsumer | null => { // If rule type doesn't support multi-consumer or no valid consumers exists, // return nothing @@ -55,11 +53,6 @@ export const getInitialMultiConsumer = ({ return validConsumers[0]; } - // If o11y is in the valid consumers and it is serverless, just use that - if (isServerless && validConsumers.includes(AlertConsumers.OBSERVABILITY)) { - return AlertConsumers.OBSERVABILITY; - } - const selectedAvailableRuleType = ruleTypes.find((availableRuleType) => { return availableRuleType.id === ruleType.id; }); @@ -87,7 +80,7 @@ export const getInitialMultiConsumer = ({ validConsumers, }); - // If validated consumer exists and no o11y in valid consumers, just use that + // If validated consumer exists just use that if (validatedConsumer) { return validatedConsumer; } diff --git a/x-pack/platform/plugins/private/translations/translations/fr-FR.json b/x-pack/platform/plugins/private/translations/translations/fr-FR.json index 72895ee5ee1b..9a39a4212149 100644 --- a/x-pack/platform/plugins/private/translations/translations/fr-FR.json +++ b/x-pack/platform/plugins/private/translations/translations/fr-FR.json @@ -32005,7 +32005,6 @@ "xpack.observability.metric.iconSelect.tagIconLabel": "Balise", "xpack.observability.metric.iconSelect.temperatureLabel": "Température", "xpack.observability.metricWithSparkline.nATextColorLabel": "S. O.", - "xpack.observability.nameFeatureTitle": "Observabilité", "xpack.observability.news.readFullStory": "Lire toute l'histoire", "xpack.observability.news.title": "Nouveautés", "xpack.observability.noDataConfig.beatsCard.description": "Utilisez des agents Beats et APM pour envoyer des données d'observabilité à Elasticsearch. Nous facilitons les choses en proposant un support technique pour un grand nombre de langues, d'applications et de systèmes courants.", diff --git a/x-pack/platform/plugins/private/translations/translations/ja-JP.json b/x-pack/platform/plugins/private/translations/translations/ja-JP.json index d41df0ffd2a4..f160fe907b52 100644 --- a/x-pack/platform/plugins/private/translations/translations/ja-JP.json +++ b/x-pack/platform/plugins/private/translations/translations/ja-JP.json @@ -31983,7 +31983,6 @@ "xpack.observability.metric.iconSelect.tagIconLabel": "タグ", "xpack.observability.metric.iconSelect.temperatureLabel": "温度", "xpack.observability.metricWithSparkline.nATextColorLabel": "N/A", - "xpack.observability.nameFeatureTitle": "Observability", "xpack.observability.news.readFullStory": "詳細なストーリーを読む", "xpack.observability.news.title": "新機能", "xpack.observability.noDataConfig.beatsCard.description": "BeatsとAPMエージェントを使用して、オブザーバビリティデータをElasticsearchに送信します。多数の一般的なシステム、アプリ、言語では、サポートによって処理が簡単になりました。", diff --git a/x-pack/platform/plugins/private/translations/translations/zh-CN.json b/x-pack/platform/plugins/private/translations/translations/zh-CN.json index 6b07213dd4d8..4cd228ff04aa 100644 --- a/x-pack/platform/plugins/private/translations/translations/zh-CN.json +++ b/x-pack/platform/plugins/private/translations/translations/zh-CN.json @@ -32038,7 +32038,6 @@ "xpack.observability.metric.iconSelect.tagIconLabel": "标签", "xpack.observability.metric.iconSelect.temperatureLabel": "温度", "xpack.observability.metricWithSparkline.nATextColorLabel": "不可用", - "xpack.observability.nameFeatureTitle": "Observability", "xpack.observability.news.readFullStory": "详细了解", "xpack.observability.news.title": "最新动态", "xpack.observability.noDataConfig.beatsCard.description": "使用 Beats 和 APM 代理将 Observability 数据发送到 Elasticsearch。我们使许多流行系统、应用和语言都可以轻松获取支持。", diff --git a/x-pack/platform/plugins/shared/ml/common/types/capabilities.ts b/x-pack/platform/plugins/shared/ml/common/types/capabilities.ts index b598a3bfd4d2..8a48fa8fd54d 100644 --- a/x-pack/platform/plugins/shared/ml/common/types/capabilities.ts +++ b/x-pack/platform/plugins/shared/ml/common/types/capabilities.ts @@ -6,6 +6,7 @@ */ import type { KibanaRequest } from '@kbn/core/server'; +import { DEPRECATED_ALERTING_CONSUMERS } from '@kbn/rule-data-utils'; import { ALERTING_FEATURE_ID } from '@kbn/alerting-plugin/common'; import { PLUGIN_ID } from '../constants/app'; import { @@ -110,9 +111,9 @@ export function getDefaultCapabilities(): MlCapabilities { }; } -const alertingFeatures = Object.values(ML_ALERT_TYPES).map((ruleTypeId) => ({ +export const alertingFeatures = Object.values(ML_ALERT_TYPES).map((ruleTypeId) => ({ ruleTypeId, - consumers: [PLUGIN_ID, ALERTING_FEATURE_ID], + consumers: [PLUGIN_ID, ALERTING_FEATURE_ID, ...DEPRECATED_ALERTING_CONSUMERS], })); export function getPluginPrivileges() { diff --git a/x-pack/platform/plugins/shared/ml/server/plugin.ts b/x-pack/platform/plugins/shared/ml/server/plugin.ts index beeab9767d95..1b305bdec76b 100644 --- a/x-pack/platform/plugins/shared/ml/server/plugin.ts +++ b/x-pack/platform/plugins/shared/ml/server/plugin.ts @@ -26,10 +26,9 @@ import type { SpacesPluginSetup } from '@kbn/spaces-plugin/server'; import type { FieldFormatsStart } from '@kbn/field-formats-plugin/server'; import type { HomeServerPluginSetup } from '@kbn/home-plugin/server'; import type { CasesServerSetup } from '@kbn/cases-plugin/server'; -import { ALERTING_FEATURE_ID } from '@kbn/alerting-plugin/common'; import { KibanaFeatureScope } from '@kbn/features-plugin/common'; import type { PluginsSetup, PluginsStart, RouteInitialization } from './types'; -import type { MlCapabilities } from '../common/types/capabilities'; +import { type MlCapabilities, alertingFeatures } from '../common/types/capabilities'; import { notificationsRoutes } from './routes/notifications'; import { type MlFeatures, @@ -70,7 +69,6 @@ import { } from './saved_objects'; import { RouteGuard } from './lib/route_guard'; import { registerMlAlerts } from './lib/alerts/register_ml_alerts'; -import { ML_ALERT_TYPES } from '../common/constants/alerts'; import { alertingRoutes } from './routes/alerting'; import { registerCollector } from './usage'; import { SavedObjectsSyncService } from './saved_objects/sync_task'; @@ -143,10 +141,7 @@ export class MlServerPlugin management: { insightsAndAlerting: ['jobsListLink', 'triggersActions'], }, - alerting: Object.values(ML_ALERT_TYPES).map((ruleTypeId) => ({ - ruleTypeId, - consumers: [PLUGIN_ID, ALERTING_FEATURE_ID], - })), + alerting: alertingFeatures, privileges: { all: admin, read: user, diff --git a/x-pack/platform/plugins/shared/triggers_actions_ui/public/application/sections/rule_form/rule_form_route.tsx b/x-pack/platform/plugins/shared/triggers_actions_ui/public/application/sections/rule_form/rule_form_route.tsx index 3adca7c95e73..48f8a321e017 100644 --- a/x-pack/platform/plugins/shared/triggers_actions_ui/public/application/sections/rule_form/rule_form_route.tsx +++ b/x-pack/platform/plugins/shared/triggers_actions_ui/public/application/sections/rule_form/rule_form_route.tsx @@ -29,7 +29,6 @@ export const RuleFormRoute = () => { actionTypeRegistry, contentManagement, chrome, - isServerless, setBreadcrumbs, ...startServices } = useKibana().services; @@ -78,7 +77,6 @@ export const RuleFormRoute = () => { contentManagement, ...startServices, }} - isServerless={isServerless} id={id} ruleTypeId={ruleTypeId} onCancel={() => { diff --git a/x-pack/solutions/observability/plugins/apm/server/feature.ts b/x-pack/solutions/observability/plugins/apm/server/feature.ts index 0afdec0e4d34..507b8eba88d7 100644 --- a/x-pack/solutions/observability/plugins/apm/server/feature.ts +++ b/x-pack/solutions/observability/plugins/apm/server/feature.ts @@ -14,7 +14,7 @@ import type { } from '@kbn/licensing-plugin/server'; import { APM_INDEX_SETTINGS_SAVED_OBJECT_TYPE } from '@kbn/apm-sources-access-plugin/server/saved_objects/apm_indices'; -import { ApmRuleType } from '@kbn/rule-data-utils'; +import { ApmRuleType, DEPRECATED_ALERTING_CONSUMERS } from '@kbn/rule-data-utils'; import { ALERTING_FEATURE_ID } from '@kbn/alerting-plugin/common'; import type { KibanaFeatureConfig } from '@kbn/features-plugin/common'; import { KibanaFeatureScope } from '@kbn/features-plugin/common'; @@ -22,7 +22,7 @@ import { APM_SERVER_FEATURE_ID } from '../common/rules/apm_rule_types'; const alertingFeatures = Object.values(ApmRuleType).map((ruleTypeId) => ({ ruleTypeId, - consumers: [APM_SERVER_FEATURE_ID, ALERTING_FEATURE_ID], + consumers: [APM_SERVER_FEATURE_ID, ALERTING_FEATURE_ID, ...DEPRECATED_ALERTING_CONSUMERS], })); export const APM_FEATURE: KibanaFeatureConfig = { diff --git a/x-pack/solutions/observability/plugins/infra/server/features.ts b/x-pack/solutions/observability/plugins/infra/server/features.ts index 77fb8d317fef..66243b7d605b 100644 --- a/x-pack/solutions/observability/plugins/infra/server/features.ts +++ b/x-pack/solutions/observability/plugins/infra/server/features.ts @@ -9,12 +9,14 @@ import { i18n } from '@kbn/i18n'; import { DEFAULT_APP_CATEGORIES } from '@kbn/core/server'; import { logViewSavedObjectName } from '@kbn/logs-shared-plugin/server'; import { + DEPRECATED_ALERTING_CONSUMERS, ML_ANOMALY_DETECTION_RULE_TYPE_ID, OBSERVABILITY_THRESHOLD_RULE_TYPE_ID, } from '@kbn/rule-data-utils'; import { ES_QUERY_ID } from '@kbn/rule-data-utils'; import { metricsDataSourceSavedObjectName } from '@kbn/metrics-data-access-plugin/server'; import { ALERTING_FEATURE_ID } from '@kbn/alerting-plugin/common'; +import type { KibanaFeatureConfig } from '@kbn/features-plugin/common'; import { KibanaFeatureScope } from '@kbn/features-plugin/common'; import { LOG_DOCUMENT_COUNT_RULE_TYPE_ID } from '../common/alerting/logs/log_threshold/types'; import { @@ -32,69 +34,76 @@ const metricRuleTypes = [ ML_ANOMALY_DETECTION_RULE_TYPE_ID, ]; -const metricAlertingFeatures = metricRuleTypes.map((ruleTypeId) => ({ - ruleTypeId, - consumers: [METRICS_FEATURE_ID, ALERTING_FEATURE_ID], -})); +export const getMetricsFeature = (): KibanaFeatureConfig => { + const metricAlertingFeatures = metricRuleTypes.map((ruleTypeId) => { + const consumers = [METRICS_FEATURE_ID, ALERTING_FEATURE_ID, ...DEPRECATED_ALERTING_CONSUMERS]; -export const METRICS_FEATURE = { - id: METRICS_FEATURE_ID, - name: i18n.translate('xpack.infra.featureRegistry.linkInfrastructureTitle', { - defaultMessage: 'Infrastructure', - }), - order: 800, - category: DEFAULT_APP_CATEGORIES.observability, - scope: [KibanaFeatureScope.Spaces, KibanaFeatureScope.Security], - app: ['infra', 'metrics', 'kibana'], - catalogue: ['infraops', 'metrics'], - management: { - insightsAndAlerting: ['triggersActions'], - }, - alerting: metricAlertingFeatures, - privileges: { - all: { - app: ['infra', 'metrics', 'kibana'], - catalogue: ['infraops', 'metrics'], - api: ['infra', 'rac'], - savedObject: { - all: ['infrastructure-ui-source', metricsDataSourceSavedObjectName], - read: ['index-pattern'], - }, - alerting: { - rule: { - all: metricAlertingFeatures, - }, - alert: { - all: metricAlertingFeatures, - }, - }, - management: { - insightsAndAlerting: ['triggersActions'], - }, - ui: ['show', 'configureSource', 'save'], + return { + ruleTypeId, + consumers, + }; + }); + + const METRICS_FEATURE = { + id: METRICS_FEATURE_ID, + name: i18n.translate('xpack.infra.featureRegistry.linkInfrastructureTitle', { + defaultMessage: 'Infrastructure', + }), + order: 800, + category: DEFAULT_APP_CATEGORIES.observability, + scope: [KibanaFeatureScope.Spaces, KibanaFeatureScope.Security], + app: ['infra', 'metrics', 'kibana'], + catalogue: ['infraops', 'metrics'], + management: { + insightsAndAlerting: ['triggersActions'], }, - read: { - app: ['infra', 'metrics', 'kibana'], - catalogue: ['infraops', 'metrics'], - api: ['infra', 'rac'], - savedObject: { - all: [], - read: ['infrastructure-ui-source', 'index-pattern', metricsDataSourceSavedObjectName], - }, - alerting: { - rule: { - read: metricAlertingFeatures, + alerting: metricAlertingFeatures, + privileges: { + all: { + app: ['infra', 'metrics', 'kibana'], + catalogue: ['infraops', 'metrics'], + api: ['infra', 'rac'], + savedObject: { + all: ['infrastructure-ui-source', metricsDataSourceSavedObjectName], + read: ['index-pattern'], }, - alert: { - read: metricAlertingFeatures, + alerting: { + rule: { + all: metricAlertingFeatures, + }, + alert: { + all: metricAlertingFeatures, + }, }, + management: { + insightsAndAlerting: ['triggersActions'], + }, + ui: ['show', 'configureSource', 'save'], }, - management: { - insightsAndAlerting: ['triggersActions'], + read: { + app: ['infra', 'metrics', 'kibana'], + catalogue: ['infraops', 'metrics'], + api: ['infra', 'rac'], + savedObject: { + all: [], + read: ['infrastructure-ui-source', 'index-pattern', metricsDataSourceSavedObjectName], + }, + alerting: { + rule: { + read: metricAlertingFeatures, + }, + alert: { + read: metricAlertingFeatures, + }, + }, + management: { + insightsAndAlerting: ['triggersActions'], + }, + ui: ['show'], }, - ui: ['show'], }, - }, + }; + return METRICS_FEATURE; }; const logsRuleTypes = [ @@ -103,68 +112,74 @@ const logsRuleTypes = [ OBSERVABILITY_THRESHOLD_RULE_TYPE_ID, ML_ANOMALY_DETECTION_RULE_TYPE_ID, ]; +export const getLogsFeature = (): KibanaFeatureConfig => { + const logsAlertingFeatures = logsRuleTypes.map((ruleTypeId) => { + const consumers = [LOGS_FEATURE_ID, ALERTING_FEATURE_ID, ...DEPRECATED_ALERTING_CONSUMERS]; -const logsAlertingFeatures = logsRuleTypes.map((ruleTypeId) => ({ - ruleTypeId, - consumers: [LOGS_FEATURE_ID, ALERTING_FEATURE_ID], -})); + return { + ruleTypeId, + consumers, + }; + }); -export const LOGS_FEATURE = { - id: LOGS_FEATURE_ID, - name: i18n.translate('xpack.infra.featureRegistry.linkLogsTitle', { - defaultMessage: 'Logs', - }), - order: 700, - category: DEFAULT_APP_CATEGORIES.observability, - scope: [KibanaFeatureScope.Spaces, KibanaFeatureScope.Security], - app: ['infra', 'logs', 'kibana', 'observability-logs-explorer'], - catalogue: ['infralogging', 'logs'], - management: { - insightsAndAlerting: ['triggersActions'], - }, - alerting: logsAlertingFeatures, - privileges: { - all: { - app: ['infra', 'logs', 'kibana', 'observability-logs-explorer'], - catalogue: ['infralogging', 'logs'], - api: ['infra', 'rac'], - savedObject: { - all: [infraSourceConfigurationSavedObjectName, logViewSavedObjectName], - read: [], - }, - alerting: { - rule: { - all: logsAlertingFeatures, - }, - alert: { - all: logsAlertingFeatures, - }, - }, - management: { - insightsAndAlerting: ['triggersActions'], - }, - ui: ['show', 'configureSource', 'save'], + const LOGS_FEATURE = { + id: LOGS_FEATURE_ID, + name: i18n.translate('xpack.infra.featureRegistry.linkLogsTitle', { + defaultMessage: 'Logs', + }), + order: 700, + category: DEFAULT_APP_CATEGORIES.observability, + scope: [KibanaFeatureScope.Spaces, KibanaFeatureScope.Security], + app: ['infra', 'logs', 'kibana', 'observability-logs-explorer'], + catalogue: ['infralogging', 'logs'], + management: { + insightsAndAlerting: ['triggersActions'], }, - read: { - app: ['infra', 'logs', 'kibana', 'observability-logs-explorer'], - catalogue: ['infralogging', 'logs'], - api: ['infra', 'rac'], - alerting: { - rule: { - read: logsAlertingFeatures, + alerting: logsAlertingFeatures, + privileges: { + all: { + app: ['infra', 'logs', 'kibana', 'observability-logs-explorer'], + catalogue: ['infralogging', 'logs'], + api: ['infra', 'rac'], + savedObject: { + all: [infraSourceConfigurationSavedObjectName, logViewSavedObjectName], + read: [], }, - alert: { - read: logsAlertingFeatures, + alerting: { + rule: { + all: logsAlertingFeatures, + }, + alert: { + all: logsAlertingFeatures, + }, }, + management: { + insightsAndAlerting: ['triggersActions'], + }, + ui: ['show', 'configureSource', 'save'], }, - management: { - insightsAndAlerting: ['triggersActions'], + read: { + app: ['infra', 'logs', 'kibana', 'observability-logs-explorer'], + catalogue: ['infralogging', 'logs'], + api: ['infra', 'rac'], + alerting: { + rule: { + read: logsAlertingFeatures, + }, + alert: { + read: logsAlertingFeatures, + }, + }, + management: { + insightsAndAlerting: ['triggersActions'], + }, + savedObject: { + all: [], + read: [infraSourceConfigurationSavedObjectName, logViewSavedObjectName], + }, + ui: ['show'], }, - savedObject: { - all: [], - read: [infraSourceConfigurationSavedObjectName, logViewSavedObjectName], - }, - ui: ['show'], }, - }, + }; + return LOGS_FEATURE; }; diff --git a/x-pack/solutions/observability/plugins/infra/server/plugin.ts b/x-pack/solutions/observability/plugins/infra/server/plugin.ts index 9dce77dcd187..56e98bd94a75 100644 --- a/x-pack/solutions/observability/plugins/infra/server/plugin.ts +++ b/x-pack/solutions/observability/plugins/infra/server/plugin.ts @@ -20,7 +20,7 @@ import { import { type AlertsLocatorParams, alertsLocatorID } from '@kbn/observability-plugin/common'; import { mapValues } from 'lodash'; import { LOGS_FEATURE_ID, METRICS_FEATURE_ID } from '../common/constants'; -import { LOGS_FEATURE, METRICS_FEATURE } from './features'; +import { getLogsFeature, getMetricsFeature } from './features'; import { registerRoutes } from './infra_server'; import type { InfraServerPluginSetupDeps, @@ -85,7 +85,6 @@ export class InfraServerPlugin constructor(context: PluginInitializerContext) { this.config = context.config.get(); this.logger = context.logger.get(); - this.logsRules = new RulesService( LOGS_FEATURE_ID, LOGS_RULES_ALERT_CONTEXT, @@ -105,7 +104,6 @@ export class InfraServerPlugin setup(core: InfraPluginCoreSetup, plugins: InfraServerPluginSetupDeps) { const framework = new KibanaFramework(core, this.config, plugins); - const metricsClient = plugins.metricsDataAccess.client; metricsClient.setDefaultMetricIndicesHandler(async (options: GetMetricIndicesOptions) => { const sourceConfiguration = await sources.getInfraSourceConfiguration( @@ -181,8 +179,8 @@ export class InfraServerPlugin plugins: libsPlugins, }; - plugins.features.registerKibanaFeature(METRICS_FEATURE); - plugins.features.registerKibanaFeature(LOGS_FEATURE); + plugins.features.registerKibanaFeature(getMetricsFeature()); + plugins.features.registerKibanaFeature(getLogsFeature()); // Register an handler to retrieve the fallback logView starting from a source configuration plugins.logsShared.logViews.registerLogViewFallbackHandler(async (sourceId, { soClient }) => { diff --git a/x-pack/solutions/observability/plugins/observability/common/constants.ts b/x-pack/solutions/observability/plugins/observability/common/constants.ts index 8bc12f8737bf..3f82af8efa3b 100644 --- a/x-pack/solutions/observability/plugins/observability/common/constants.ts +++ b/x-pack/solutions/observability/plugins/observability/common/constants.ts @@ -30,7 +30,6 @@ export const observabilityAlertFeatureIds: ValidFeatureId[] = [ export const observabilityRuleCreationValidConsumers: RuleCreationValidConsumer[] = [ AlertConsumers.INFRASTRUCTURE, AlertConsumers.LOGS, - AlertConsumers.OBSERVABILITY, ]; export const EventsAsUnit = 'events'; diff --git a/x-pack/solutions/observability/plugins/observability/public/pages/rules/rule.tsx b/x-pack/solutions/observability/plugins/observability/public/pages/rules/rule.tsx index 76d1bf7bcb57..8088156979e2 100644 --- a/x-pack/solutions/observability/plugins/observability/public/pages/rules/rule.tsx +++ b/x-pack/solutions/observability/plugins/observability/public/pages/rules/rule.tsx @@ -25,11 +25,11 @@ export function RulePage() { application, notifications, charts, + serverless, settings, data, dataViews, unifiedSearch, - serverless, actionTypeRegistry, ruleTypeRegistry, chrome, @@ -105,7 +105,6 @@ export function RulePage() { ruleTypeId={ruleTypeId} validConsumers={observabilityRuleCreationValidConsumers} multiConsumerSelection={AlertConsumers.LOGS} - isServerless={!!serverless} onCancel={() => { if (returnApp && returnPath) { application.navigateToApp(returnApp, { path: returnPath }); diff --git a/x-pack/solutions/observability/plugins/observability/server/plugin.ts b/x-pack/solutions/observability/plugins/observability/server/plugin.ts index c3cc2a33c1de..5878542cb345 100644 --- a/x-pack/solutions/observability/plugins/observability/server/plugin.ts +++ b/x-pack/solutions/observability/plugins/observability/server/plugin.ts @@ -13,18 +13,10 @@ import { getApiTags as getCasesApiTags, } from '@kbn/cases-plugin/common'; import { CloudSetup } from '@kbn/cloud-plugin/server'; -import { - CoreSetup, - CoreStart, - DEFAULT_APP_CATEGORIES, - Logger, - Plugin, - PluginInitializerContext, -} from '@kbn/core/server'; +import { CoreSetup, CoreStart, Logger, Plugin, PluginInitializerContext } from '@kbn/core/server'; import { DISCOVER_APP_LOCATOR, type DiscoverAppLocatorParams } from '@kbn/discover-plugin/common'; import { FeaturesPluginSetup } from '@kbn/features-plugin/server'; import type { GuidedOnboardingPluginSetup } from '@kbn/guided-onboarding-plugin/server'; -import { i18n } from '@kbn/i18n'; import { RuleRegistryPluginSetupContract, RuleRegistryPluginStartContract, @@ -33,8 +25,6 @@ import { SharePluginSetup } from '@kbn/share-plugin/server'; import { SpacesPluginSetup, SpacesPluginStart } from '@kbn/spaces-plugin/server'; import { UsageCollectionSetup } from '@kbn/usage-collection-plugin/server'; import { DataViewsServerPluginStart } from '@kbn/data-views-plugin/server'; -import { ALERTING_FEATURE_ID } from '@kbn/alerting-plugin/common'; -import { KibanaFeatureScope } from '@kbn/features-plugin/common'; import { ObservabilityConfig } from '.'; import { observabilityFeatureId } from '../common'; import { @@ -53,7 +43,6 @@ import { registerRoutes } from './routes/register_routes'; import { threshold } from './saved_objects/threshold'; import { AlertDetailsContextualInsightsService } from './services'; import { uiSettings } from './ui_settings'; -import { OBSERVABILITY_RULE_TYPE_IDS_WITH_SUPPORTED_STACK_RULE_TYPES } from '../common/constants'; import { getCasesFeature } from './features/cases_v1'; import { getCasesFeatureV2 } from './features/cases_v2'; import { getCasesFeatureV3 } from './features/cases_v3'; @@ -79,14 +68,6 @@ interface PluginStart { ruleRegistry: RuleRegistryPluginStartContract; dashboard: DashboardPluginStart; } - -const alertingFeatures = OBSERVABILITY_RULE_TYPE_IDS_WITH_SUPPORTED_STACK_RULE_TYPES.map( - (ruleTypeId) => ({ - ruleTypeId, - consumers: [observabilityFeatureId, ALERTING_FEATURE_ID], - }) -); - export class ObservabilityPlugin implements Plugin { @@ -130,59 +111,6 @@ export class ObservabilityPlugin }); } - if (config.createO11yGenericFeatureId) { - plugins.features.registerKibanaFeature({ - id: observabilityFeatureId, - name: i18n.translate('xpack.observability.nameFeatureTitle', { - defaultMessage: 'Observability', - }), - order: 1000, - category: DEFAULT_APP_CATEGORIES.observability, - scope: [KibanaFeatureScope.Spaces, KibanaFeatureScope.Security], - app: [observabilityFeatureId], - catalogue: [observabilityFeatureId], - alerting: alertingFeatures, - privileges: { - all: { - app: [observabilityFeatureId], - catalogue: [observabilityFeatureId], - api: ['rac'], - savedObject: { - all: [], - read: [], - }, - alerting: { - rule: { - all: alertingFeatures, - }, - alert: { - all: alertingFeatures, - }, - }, - ui: ['read', 'write'], - }, - read: { - app: [observabilityFeatureId], - catalogue: [observabilityFeatureId], - api: ['rac'], - savedObject: { - all: [], - read: [], - }, - alerting: { - rule: { - read: alertingFeatures, - }, - alert: { - read: alertingFeatures, - }, - }, - ui: ['read'], - }, - }, - }); - } - const { ruleDataService } = plugins.ruleRegistry; core.savedObjects.registerType(threshold); diff --git a/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.test.tsx b/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.test.tsx index 1230ec503474..e5ce1ab8dc4f 100644 --- a/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.test.tsx +++ b/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.test.tsx @@ -17,6 +17,7 @@ describe('updateGlobalNavigation', () => { describe('when no observability apps are enabled', () => { it('hides the overview link', () => { const capabilities = { + logs: { show: false }, navLinks: { apm: false, logs: false, metrics: false, uptime: false }, } as unknown as ApplicationStart['capabilities']; const deepLinks: AppDeepLink[] = []; @@ -37,6 +38,7 @@ describe('updateGlobalNavigation', () => { describe('when one observability app is enabled', () => { it('shows the overview link', () => { const capabilities = { + logs: { show: true }, navLinks: { apm: true, logs: false, metrics: false, uptime: false }, } as unknown as ApplicationStart['capabilities']; const deepLinks: AppDeepLink[] = []; @@ -57,6 +59,7 @@ describe('updateGlobalNavigation', () => { it('shows the cases deep link', () => { const capabilities = { [casesFeatureId]: { read_cases: true }, + logs: { show: true }, navLinks: { apm: true, logs: false, metrics: false, uptime: false }, } as unknown as ApplicationStart['capabilities']; @@ -93,6 +96,7 @@ describe('updateGlobalNavigation', () => { it('hides the cases deep link', () => { const capabilities = { [casesFeatureId]: { read_cases: false }, + logs: { show: true }, navLinks: { apm: true, logs: false, metrics: false, uptime: false }, } as unknown as ApplicationStart['capabilities']; @@ -124,6 +128,7 @@ describe('updateGlobalNavigation', () => { it('shows the alerts deep link', () => { const capabilities = { [casesFeatureId]: { read_cases: true }, + logs: { show: true }, navLinks: { apm: true, logs: false, metrics: false, uptime: false }, } as unknown as ApplicationStart['capabilities']; @@ -156,6 +161,43 @@ describe('updateGlobalNavigation', () => { visibleIn: ['sideNav', 'globalSearch', 'home', 'kibanaOverview'], }); }); + + it('shows the alerts deep link for logs', () => { + const capabilities = { + [casesFeatureId]: { read_cases: true }, + logs: { show: true }, + navLinks: { apm: false, logs: false, metrics: false, uptime: false }, + } as unknown as ApplicationStart['capabilities']; + + const deepLinks = [ + { + id: 'alerts', + title: 'Alerts', + order: 8001, + path: '/alerts', + visibleIn: [], + }, + ]; + const callback = jest.fn(); + const updater$ = { + next: (cb: AppUpdater) => callback(cb(app)), + } as unknown as Subject; + + updateGlobalNavigation({ capabilities, deepLinks, updater$ }); + + expect(callback).toHaveBeenCalledWith({ + deepLinks: [ + { + id: 'alerts', + title: 'Alerts', + order: 8001, + path: '/alerts', + visibleIn: ['sideNav', 'globalSearch'], + }, + ], + visibleIn: ['sideNav', 'globalSearch', 'home', 'kibanaOverview'], + }); + }); }); }); }); diff --git a/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.tsx b/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.tsx index ff9d30fb0518..f32d89d34fae 100644 --- a/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.tsx +++ b/x-pack/solutions/observability/plugins/observability_shared/public/services/update_global_navigation.tsx @@ -19,12 +19,17 @@ export function updateGlobalNavigation({ deepLinks: AppDeepLink[]; updater$: Subject; }) { - const { apm, logs, metrics, uptime, slo } = capabilities.navLinks; + const { apm, metrics, uptime, synthetics, slo } = capabilities.navLinks; + /* logs is a special case. + * It is not a nav link but still exists as a + * Kibana feature privilege with attached rule types */ + const logs = capabilities.logs?.show; const someVisible = Object.values({ apm, logs, metrics, uptime, + synthetics, slo, }).some((visible) => visible); diff --git a/x-pack/solutions/observability/plugins/serverless_observability/public/navigation_tree.ts b/x-pack/solutions/observability/plugins/serverless_observability/public/navigation_tree.ts index 05cdba1a68cb..7272b631a10d 100644 --- a/x-pack/solutions/observability/plugins/serverless_observability/public/navigation_tree.ts +++ b/x-pack/solutions/observability/plugins/serverless_observability/public/navigation_tree.ts @@ -315,7 +315,17 @@ export const createNavigationTree = ({ defaultMessage: 'Access', }), breadcrumbStatus: 'hidden', - children: [{ link: 'management:api_keys', breadcrumbStatus: 'hidden' }], + children: [ + { link: 'management:api_keys', breadcrumbStatus: 'hidden' }, + { link: 'management:roles', breadcrumbStatus: 'hidden' }, + { + cloudLink: 'userAndRoles', + title: i18n.translate( + 'xpack.serverlessObservability.navLinks.projectSettings.mngt.usersAndRoles', + { defaultMessage: 'Manage organization members' } + ), + }, + ], }, { title: i18n.translate( @@ -374,10 +384,6 @@ export const createNavigationTree = ({ { link: 'fleet', }, - { - id: 'cloudLinkUserAndRoles', - cloudLink: 'userAndRoles', - }, { id: 'cloudLinkBilling', cloudLink: 'billingAndSub', diff --git a/x-pack/solutions/observability/plugins/slo/server/plugin.ts b/x-pack/solutions/observability/plugins/slo/server/plugin.ts index 86c76f49a3e9..c705e95b611b 100644 --- a/x-pack/solutions/observability/plugins/slo/server/plugin.ts +++ b/x-pack/solutions/observability/plugins/slo/server/plugin.ts @@ -19,7 +19,7 @@ import { import { KibanaFeatureScope } from '@kbn/features-plugin/common'; import { i18n } from '@kbn/i18n'; import { AlertsLocatorDefinition, sloFeatureId } from '@kbn/observability-plugin/common'; -import { SLO_BURN_RATE_RULE_TYPE_ID } from '@kbn/rule-data-utils'; +import { SLO_BURN_RATE_RULE_TYPE_ID, DEPRECATED_ALERTING_CONSUMERS } from '@kbn/rule-data-utils'; import { mapValues } from 'lodash'; import { LockAcquisitionError, LockManagerService } from '@kbn/lock-manager'; import { getSloClientWithRequest } from './client'; @@ -81,7 +81,7 @@ export class SLOPlugin const alertingFeatures = sloRuleTypes.map((ruleTypeId) => ({ ruleTypeId, - consumers: [sloFeatureId, ALERTING_FEATURE_ID], + consumers: [sloFeatureId, ALERTING_FEATURE_ID, ...DEPRECATED_ALERTING_CONSUMERS], })); plugins.features.registerKibanaFeature({ diff --git a/x-pack/solutions/observability/plugins/synthetics/server/feature.ts b/x-pack/solutions/observability/plugins/synthetics/server/feature.ts index 0e8a08e8aed1..d0fc60c674dd 100644 --- a/x-pack/solutions/observability/plugins/synthetics/server/feature.ts +++ b/x-pack/solutions/observability/plugins/synthetics/server/feature.ts @@ -12,6 +12,7 @@ import { SubFeaturePrivilegeGroupType, } from '@kbn/features-plugin/common'; import { ALERTING_FEATURE_ID } from '@kbn/alerting-plugin/common'; +import { DEPRECATED_ALERTING_CONSUMERS } from '@kbn/rule-data-utils'; import { UPTIME_RULE_TYPE_IDS, SYNTHETICS_RULE_TYPE_IDS } from '@kbn/rule-data-utils'; import { KibanaFeatureScope } from '@kbn/features-plugin/common'; import { syntheticsMonitorType, syntheticsParamType } from '../common/types/saved_objects'; @@ -32,7 +33,7 @@ const ruleTypes = [...UPTIME_RULE_TYPE_IDS, ...SYNTHETICS_RULE_TYPE_IDS]; const alertingFeatures = ruleTypes.map((ruleTypeId) => ({ ruleTypeId, - consumers: [PLUGIN.ID, ALERTING_FEATURE_ID], + consumers: [PLUGIN.ID, ALERTING_FEATURE_ID, ...DEPRECATED_ALERTING_CONSUMERS], })); const elasticManagedLocationsEnabledPrivilege: SubFeaturePrivilegeGroupConfig = { diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/ai_assistant/complete/functions/alerts.spec.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/ai_assistant/complete/functions/alerts.spec.ts index 043297bb6a15..4a74444db74c 100644 --- a/x-pack/test/api_integration/deployment_agnostic/apis/observability/ai_assistant/complete/functions/alerts.spec.ts +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/ai_assistant/complete/functions/alerts.spec.ts @@ -45,6 +45,7 @@ export default function ApiTest({ getService }: DeploymentAgnosticFtrProviderCon const samlAuth = getService('samlAuth'); const alertingApi = getService('alertingApi'); const observabilityAIAssistantAPIClient = getService('observabilityAIAssistantApi'); + const kibanaServer = getService('kibanaServer'); describe('alerts', function () { // LLM Proxy is not yet support in MKI: https://github.com/elastic/obs-ai-assistant-team/issues/199 @@ -62,6 +63,7 @@ export default function ApiTest({ getService }: DeploymentAgnosticFtrProviderCon const end = 'now'; before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); internalReqHeader = samlAuth.getInternalRequestHeader(); roleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('editor'); @@ -136,6 +138,7 @@ export default function ApiTest({ getService }: DeploymentAgnosticFtrProviderCon await deleteRules({ getService, roleAuthc, internalReqHeader }); await samlAuth.invalidateM2mApiKeyWithRoleScope(roleAuthc); + await kibanaServer.savedObjects.cleanStandardList(); }); it('should execute the function without any errors', async () => { diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate_rule.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/burn_rate_rule.ts similarity index 71% rename from x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate_rule.ts rename to x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/burn_rate_rule.ts index fddc72d3283c..2c125cd27c5b 100644 --- a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate_rule.ts +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/burn_rate_rule.ts @@ -4,11 +4,18 @@ * 2.0; you may not use this file except in compliance with the Elastic License * 2.0. */ - +import { v4 as uuidv4 } from 'uuid'; import { cleanup, Dataset, generate, PartialConfig } from '@kbn/data-forge'; import { RoleCredentials, InternalRequestHeader } from '@kbn/ftr-common-functional-services'; import expect from '@kbn/expect'; -import { DeploymentAgnosticFtrProviderContext } from '../../../ftr_provider_context'; +import { DeploymentAgnosticFtrProviderContext } from '../../../../ftr_provider_context'; + +const RULE_TYPE_ID = 'slo.rules.burnRate'; +const DATA_VIEW = 'kbn-data-forge-fake_hosts.fake_hosts-*'; +const RULE_ALERT_INDEX = '.alerts-observability.slo.alerts-default'; +const RULE_ALERT_INDEX_PATTERN = '.alerts-observability.slo.alerts-*'; +const ALERT_ACTION_INDEX = 'alert-action-slo'; +const DATA_VIEW_ID = 'data-view-id'; export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { const esClient = getService('es'); @@ -21,24 +28,33 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { const sloApi = getService('sloApi'); const config = getService('config'); const isServerless = config.get('serverless'); + const kibanaServer = getService('kibanaServer'); const expectedConsumer = isServerless ? 'observability' : 'slo'; describe('Burn rate rule', () => { - const RULE_TYPE_ID = 'slo.rules.burnRate'; - const DATA_VIEW = 'kbn-data-forge-fake_hosts.fake_hosts-*'; - const RULE_ALERT_INDEX = '.alerts-observability.slo.alerts-default'; - const ALERT_ACTION_INDEX = 'alert-action-slo'; - const DATA_VIEW_ID = 'data-view-id'; let dataForgeConfig: PartialConfig; let dataForgeIndices: string[]; let actionId: string; let ruleId: string; let dependencyRuleId: string; + let editorRoleAuthc: RoleCredentials; let adminRoleAuthc: RoleCredentials; + let currentRoleAuthc: RoleCredentials; let internalHeaders: InternalRequestHeader; + let sloId: string; before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX_PATTERN, + query: { + match_all: {}, + }, + conflicts: 'proceed', + }); + editorRoleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('editor'); adminRoleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('admin'); + currentRoleAuthc = isServerless ? editorRoleAuthc : adminRoleAuthc; internalHeaders = samlAuth.getInternalRequestHeader(); dataForgeConfig = { schedule: [ @@ -66,7 +82,7 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { docCountTarget: 360, }); await dataViewApi.create({ - roleAuthc: adminRoleAuthc, + roleAuthc: currentRoleAuthc, name: DATA_VIEW, id: DATA_VIEW_ID, title: DATA_VIEW, @@ -76,53 +92,67 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { after(async () => { await supertestWithoutAuth .delete(`/api/alerting/rule/${ruleId}`) - .set(adminRoleAuthc.apiKeyHeader) + .set(currentRoleAuthc.apiKeyHeader) .set(internalHeaders); await supertestWithoutAuth .delete(`/api/actions/connector/${actionId}`) - .set(adminRoleAuthc.apiKeyHeader) + .set(currentRoleAuthc.apiKeyHeader) .set(internalHeaders); - await esClient.deleteByQuery({ - index: RULE_ALERT_INDEX, - query: { - bool: { - should: [ - { term: { 'kibana.alert.rule.uuid': ruleId } }, - { term: { 'kibana.alert.rule.uuid': dependencyRuleId } }, - ], + if (ruleId) { + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX, + query: { + bool: { + should: [ + { term: { 'kibana.alert.rule.uuid': ruleId } }, + ...(dependencyRuleId + ? [{ term: { 'kibana.alert.rule.uuid': dependencyRuleId } }] + : []), + ], + }, }, - }, - conflicts: 'proceed', - }); - await esClient.deleteByQuery({ - index: '.kibana-event-log-*', - query: { term: { 'rule.id': ruleId } }, - conflicts: 'proceed', - }); + conflicts: 'proceed', + }); + + await esClient.deleteByQuery({ + index: '.kibana-event-log-*', + query: { term: { 'rule.id': ruleId } }, + conflicts: 'proceed', + }); + } await dataViewApi.delete({ - roleAuthc: adminRoleAuthc, + roleAuthc: currentRoleAuthc, id: DATA_VIEW_ID, }); await supertestWithoutAuth - .delete('/api/observability/slos/my-custom-id') - .set(adminRoleAuthc.apiKeyHeader) + .delete(`/api/observability/slos/${sloId}`) + .set(currentRoleAuthc.apiKeyHeader) .set(internalHeaders); await esDeleteAllIndices([ALERT_ACTION_INDEX, ...dataForgeIndices]); await cleanup({ client: esClient, config: dataForgeConfig, logger }); - await samlAuth.invalidateM2mApiKeyWithRoleScope(adminRoleAuthc); + await samlAuth.invalidateM2mApiKeyWithRoleScope(currentRoleAuthc); + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX_PATTERN, + query: { + match_all: {}, + }, + conflicts: 'proceed', + }); }); - describe('Rule creation', () => { + describe('Rule creation', function () { it('creates rule successfully', async () => { + sloId = uuidv4(); actionId = await alertingApi.createIndexConnector({ - roleAuthc: adminRoleAuthc, + roleAuthc: currentRoleAuthc, name: 'Index Connector: Slo Burn rate API test', indexName: ALERT_ACTION_INDEX, }); await sloApi.create( { - id: 'my-custom-id', + id: sloId, name: 'my custom name', description: 'my custom description', indicator: { @@ -144,11 +174,11 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { }, groupBy: '*', }, - adminRoleAuthc + currentRoleAuthc ); const dependencyRule = await alertingApi.createRule({ - roleAuthc: adminRoleAuthc, + roleAuthc: currentRoleAuthc, tags: ['observability'], consumer: expectedConsumer, name: 'SLO Burn Rate rule - Dependency', @@ -157,7 +187,7 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { interval: '1m', }, params: { - sloId: 'my-custom-id', + sloId, windows: [ { id: '1', @@ -222,7 +252,7 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { dependencyRuleId = dependencyRule.id; const createdRule = await alertingApi.createRule({ - roleAuthc: adminRoleAuthc, + roleAuthc: currentRoleAuthc, tags: ['observability'], consumer: expectedConsumer, name: 'SLO Burn Rate rule', @@ -231,7 +261,7 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { interval: '1m', }, params: { - sloId: 'my-custom-id', + sloId, dependencies: [ { ruleId: dependencyRule.id, @@ -305,7 +335,7 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { it('should be active', async () => { const executionStatus = await alertingApi.waitForRuleStatus({ - roleAuthc: adminRoleAuthc, + roleAuthc: currentRoleAuthc, ruleId, expectedStatus: 'active', }); @@ -325,10 +355,88 @@ export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { }); it('should find the created rule with correct information about the consumer', async () => { - const match = await alertingApi.findInRules(adminRoleAuthc, ruleId); + const match = await alertingApi.findInRules(currentRoleAuthc, ruleId); expect(match).not.to.be(undefined); expect(match.consumer).to.be(expectedConsumer); }); }); }); } + +export const getSloBurnRateRuleConfiguration = ({ + sloId, + consumer, +}: { + sloId: string; + consumer: string; +}) => ({ + tags: ['observability'], + consumer, + name: 'SLO Burn Rate rule', + ruleTypeId: RULE_TYPE_ID, + schedule: { + interval: '1m', + }, + params: { + sloId, + windows: [ + { + id: '1', + actionGroup: 'slo.burnRate.alert', + burnRateThreshold: 3.36, + maxBurnRateThreshold: 720, + longWindow: { + value: 1, + unit: 'h', + }, + shortWindow: { + value: 5, + unit: 'm', + }, + }, + { + id: '2', + actionGroup: 'slo.burnRate.high', + burnRateThreshold: 1.4, + maxBurnRateThreshold: 120, + longWindow: { + value: 6, + unit: 'h', + }, + shortWindow: { + value: 30, + unit: 'm', + }, + }, + { + id: '3', + actionGroup: 'slo.burnRate.medium', + burnRateThreshold: 0.7, + maxBurnRateThreshold: 30, + longWindow: { + value: 24, + unit: 'h', + }, + shortWindow: { + value: 120, + unit: 'm', + }, + }, + { + id: '4', + actionGroup: 'slo.burnRate.low', + burnRateThreshold: 0.234, + maxBurnRateThreshold: 10, + longWindow: { + value: 72, + unit: 'h', + }, + shortWindow: { + value: 360, + unit: 'm', + }, + }, + ], + }, + actions: [], +}); diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/consumers_and_privileges.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/consumers_and_privileges.ts new file mode 100644 index 000000000000..32da9cae6cde --- /dev/null +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/consumers_and_privileges.ts @@ -0,0 +1,691 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ +import { v4 as uuidv4 } from 'uuid'; +import { cleanup, Dataset, generate, PartialConfig } from '@kbn/data-forge'; +import { RoleCredentials, InternalRequestHeader } from '@kbn/ftr-common-functional-services'; +import expect from '@kbn/expect'; +import { DeploymentAgnosticFtrProviderContext } from '../../../../ftr_provider_context'; + +const RULE_TYPE_ID = 'slo.rules.burnRate'; +const DATA_VIEW = 'kbn-data-forge-fake_hosts.fake_hosts-*'; +const RULE_ALERT_INDEX = '.alerts-observability.slo.alerts-default'; +const RULE_ALERT_INDEX_PATTERN = '.alerts-observability.slo.alerts-*'; +const ALERT_ACTION_INDEX = 'alert-action-slo'; +const DATA_VIEW_ID = 'data-view-id'; + +export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { + const esClient = getService('es'); + const esDeleteAllIndices = getService('esDeleteAllIndices'); + const samlAuth = getService('samlAuth'); + const supertestWithoutAuth = getService('supertestWithoutAuth'); + const logger = getService('log'); + const alertingApi = getService('alertingApi'); + const dataViewApi = getService('dataViewApi'); + const sloApi = getService('sloApi'); + const config = getService('config'); + const isServerless = config.get('serverless'); + const kibanaServer = getService('kibanaServer'); + + describe('Burn rate rule', () => { + let dataForgeConfig: PartialConfig; + let dataForgeIndices: string[]; + let actionId: string; + let ruleId: string; + let dependencyRuleId: string; + let editorRoleAuthc: RoleCredentials; + let adminRoleAuthc: RoleCredentials; + let currentRoleAuthc: RoleCredentials; + let internalHeaders: InternalRequestHeader; + let sloId: string; + + before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX_PATTERN, + query: { + match_all: {}, + }, + conflicts: 'proceed', + }); + editorRoleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('editor'); + adminRoleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('admin'); + currentRoleAuthc = isServerless ? editorRoleAuthc : adminRoleAuthc; + internalHeaders = samlAuth.getInternalRequestHeader(); + dataForgeConfig = { + schedule: [ + { + template: 'good', + start: 'now-15m', + end: 'now+5m', + metrics: [ + { name: 'system.cpu.user.pct', method: 'linear', start: 2.5, end: 2.5 }, + { name: 'system.cpu.total.pct', method: 'linear', start: 0.5, end: 0.5 }, + { name: 'system.cpu.total.norm.pct', method: 'linear', start: 0.8, end: 0.8 }, + ], + }, + ], + indexing: { + dataset: 'fake_hosts' as Dataset, + eventsPerCycle: 1, + interval: 10000, + alignEventsToInterval: true, + }, + }; + dataForgeIndices = await generate({ client: esClient, config: dataForgeConfig, logger }); + await alertingApi.waitForDocumentInIndex({ + indexName: DATA_VIEW, + docCountTarget: 360, + }); + await dataViewApi.create({ + roleAuthc: currentRoleAuthc, + name: DATA_VIEW, + id: DATA_VIEW_ID, + title: DATA_VIEW, + }); + }); + + after(async () => { + await supertestWithoutAuth + .delete(`/api/alerting/rule/${ruleId}`) + .set(currentRoleAuthc.apiKeyHeader) + .set(internalHeaders); + await supertestWithoutAuth + .delete(`/api/actions/connector/${actionId}`) + .set(currentRoleAuthc.apiKeyHeader) + .set(internalHeaders); + if (ruleId) { + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX, + query: { + bool: { + should: [ + { term: { 'kibana.alert.rule.uuid': ruleId } }, + ...(dependencyRuleId + ? [{ term: { 'kibana.alert.rule.uuid': dependencyRuleId } }] + : []), + ], + }, + }, + conflicts: 'proceed', + }); + + await esClient.deleteByQuery({ + index: '.kibana-event-log-*', + query: { term: { 'rule.id': ruleId } }, + conflicts: 'proceed', + }); + } + await dataViewApi.delete({ + roleAuthc: currentRoleAuthc, + id: DATA_VIEW_ID, + }); + await supertestWithoutAuth + .delete(`/api/observability/slos/${sloId}`) + .set(currentRoleAuthc.apiKeyHeader) + .set(internalHeaders); + await esDeleteAllIndices([ALERT_ACTION_INDEX, ...dataForgeIndices]); + await cleanup({ client: esClient, config: dataForgeConfig, logger }); + await samlAuth.invalidateM2mApiKeyWithRoleScope(currentRoleAuthc); + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX_PATTERN, + query: { + match_all: {}, + }, + conflicts: 'proceed', + }); + }); + + describe('Burn rate rule - slo consumer', function () { + this.tags(['skipMKI']); + const consumer = 'slo'; + it('creates rule successfully', async () => { + sloId = uuidv4(); + actionId = await alertingApi.createIndexConnector({ + roleAuthc: currentRoleAuthc, + name: 'Index Connector: Slo Burn rate API test', + indexName: ALERT_ACTION_INDEX, + }); + + await sloApi.create( + { + id: sloId, + name: 'my custom name', + description: 'my custom description', + indicator: { + type: 'sli.kql.custom', + params: { + index: DATA_VIEW, + good: 'system.cpu.total.norm.pct > 1', + total: 'system.cpu.total.norm.pct: *', + timestampField: '@timestamp', + }, + }, + timeWindow: { + duration: '7d', + type: 'rolling', + }, + budgetingMethod: 'occurrences', + objective: { + target: 0.999, + }, + groupBy: '*', + }, + currentRoleAuthc + ); + + // @ts-ignore + const createdRule = await alertingApi.createRule({ + roleAuthc: currentRoleAuthc, + ...getSloBurnRateRuleConfiguration({ + sloId, + consumer, + }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(currentRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: currentRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from slo only role', async () => { + await samlAuth.setCustomRole(ROLES.slo_only); + + const sloOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: sloOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(sloOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Burn rate rule - consumer alerts', function () { + this.tags(['skipMKI']); + const consumer = 'alerts'; + it('creates rule successfully', async () => { + sloId = uuidv4(); + actionId = await alertingApi.createIndexConnector({ + roleAuthc: currentRoleAuthc, + name: 'Index Connector: Slo Burn rate API test', + indexName: ALERT_ACTION_INDEX, + }); + + await sloApi.create( + { + id: sloId, + name: 'my custom name', + description: 'my custom description', + indicator: { + type: 'sli.kql.custom', + params: { + index: DATA_VIEW, + good: 'system.cpu.total.norm.pct > 1', + total: 'system.cpu.total.norm.pct: *', + timestampField: '@timestamp', + }, + }, + timeWindow: { + duration: '7d', + type: 'rolling', + }, + budgetingMethod: 'occurrences', + objective: { + target: 0.999, + }, + groupBy: '*', + }, + currentRoleAuthc + ); + + // @ts-ignore + const createdRule = await alertingApi.createRule({ + roleAuthc: currentRoleAuthc, + ...getSloBurnRateRuleConfiguration({ + sloId, + consumer, + }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(currentRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: currentRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from slo only role', async () => { + await samlAuth.setCustomRole(ROLES.slo_only); + + const sloOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: sloOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(sloOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Burn rate rule - consumer observability', function () { + this.tags(['skipMKI']); + const consumer = 'observability'; + + it('creates rule successfully', async () => { + sloId = uuidv4(); + actionId = await alertingApi.createIndexConnector({ + roleAuthc: currentRoleAuthc, + name: 'Index Connector: Slo Burn rate API test', + indexName: ALERT_ACTION_INDEX, + }); + + await sloApi.create( + { + id: sloId, + name: 'my custom name', + description: 'my custom description', + indicator: { + type: 'sli.kql.custom', + params: { + index: DATA_VIEW, + good: 'system.cpu.total.norm.pct > 1', + total: 'system.cpu.total.norm.pct: *', + timestampField: '@timestamp', + }, + }, + timeWindow: { + duration: '7d', + type: 'rolling', + }, + budgetingMethod: 'occurrences', + objective: { + target: 0.999, + }, + groupBy: '*', + }, + currentRoleAuthc + ); + + // @ts-ignore + const createdRule = await alertingApi.createRule({ + roleAuthc: currentRoleAuthc, + ...getSloBurnRateRuleConfiguration({ + sloId, + consumer, + }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(currentRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: currentRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from slo only role', async () => { + await samlAuth.setCustomRole(ROLES.slo_only); + + const sloOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: sloOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(sloOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Burn rate rule - can create - slo only role', function () { + this.tags(['skipMKI']); + const consumer = 'slo'; + let sloOnlyRole: RoleCredentials; + + it('creates rule successfully', async () => { + sloId = uuidv4(); + await samlAuth.setCustomRole(ROLES.slo_only); + sloOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + + await sloApi.create( + { + id: sloId, + name: 'my custom name', + description: 'my custom description', + indicator: { + type: 'sli.kql.custom', + params: { + index: DATA_VIEW, + good: 'system.cpu.total.norm.pct > 1', + total: 'system.cpu.total.norm.pct: *', + timestampField: '@timestamp', + }, + }, + timeWindow: { + duration: '7d', + type: 'rolling', + }, + budgetingMethod: 'occurrences', + objective: { + target: 0.999, + }, + groupBy: '*', + }, + currentRoleAuthc + ); + + // @ts-ignore + const createdRule = await alertingApi.createRule({ + roleAuthc: currentRoleAuthc, + ...getSloBurnRateRuleConfiguration({ + sloId, + consumer, + }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(currentRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from slo role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: sloOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(sloOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Burn rate rule - can NOT create - synthetics only role', function () { + this.tags(['skipMKI']); + const consumer = 'slo'; + let syntheticsOnlyRole: RoleCredentials; + + it('creates rule successfully', async () => { + sloId = uuidv4(); + await samlAuth.setCustomRole(ROLES.synthetics_only); + syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + + // create SLO first with editor role + await sloApi.create( + { + id: sloId, + name: 'my custom name', + description: 'my custom description', + indicator: { + type: 'sli.kql.custom', + params: { + index: DATA_VIEW, + good: 'system.cpu.total.norm.pct > 1', + total: 'system.cpu.total.norm.pct: *', + timestampField: '@timestamp', + }, + }, + timeWindow: { + duration: '7d', + type: 'rolling', + }, + budgetingMethod: 'occurrences', + objective: { + target: 0.999, + }, + groupBy: '*', + }, + currentRoleAuthc + ); + + // verify that synthetics only role cannot create the rule + // @ts-ignore + const respponse = await alertingApi.createRule({ + roleAuthc: syntheticsOnlyRole, + ...getSloBurnRateRuleConfiguration({ + sloId, + consumer, + }), + }); + expect(respponse.statusCode).to.be(403); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + }); +} + +export const ROLES = { + slo_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + slo: ['all'], + }, + }, + ], + }, + synthetics_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + uptime: ['all'], + }, + }, + ], + }, +}; + +export const getSloBurnRateRuleConfiguration = ({ + sloId, + consumer, +}: { + sloId: string; + consumer: string; +}) => ({ + tags: ['observability'], + consumer, + name: 'SLO Burn Rate rule', + ruleTypeId: RULE_TYPE_ID, + schedule: { + interval: '1m', + }, + params: { + sloId, + windows: [ + { + id: '1', + actionGroup: 'slo.burnRate.alert', + burnRateThreshold: 3.36, + maxBurnRateThreshold: 720, + longWindow: { + value: 1, + unit: 'h', + }, + shortWindow: { + value: 5, + unit: 'm', + }, + }, + { + id: '2', + actionGroup: 'slo.burnRate.high', + burnRateThreshold: 1.4, + maxBurnRateThreshold: 120, + longWindow: { + value: 6, + unit: 'h', + }, + shortWindow: { + value: 30, + unit: 'm', + }, + }, + { + id: '3', + actionGroup: 'slo.burnRate.medium', + burnRateThreshold: 0.7, + maxBurnRateThreshold: 30, + longWindow: { + value: 24, + unit: 'h', + }, + shortWindow: { + value: 120, + unit: 'm', + }, + }, + { + id: '4', + actionGroup: 'slo.burnRate.low', + burnRateThreshold: 0.234, + maxBurnRateThreshold: 10, + longWindow: { + value: 72, + unit: 'h', + }, + shortWindow: { + value: 360, + unit: 'm', + }, + }, + ], + }, + actions: [], +}); diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/index.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/index.ts new file mode 100644 index 000000000000..f64ac241a526 --- /dev/null +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/burn_rate/index.ts @@ -0,0 +1,16 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ + +import { DeploymentAgnosticFtrProviderContext } from '../../../../ftr_provider_context'; + +export default function ({ loadTestFile }: DeploymentAgnosticFtrProviderContext) { + describe('SLO Burn rate rule', () => { + loadTestFile(require.resolve('./burn_rate_rule')); + // movd to feature flag config until custom roles are supported in serverless + // loadTestFile(require.resolve('./consumers_and_privileges')); + }); +} diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/consumers_and_privileges.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/consumers_and_privileges.ts new file mode 100644 index 000000000000..df82d653f7c1 --- /dev/null +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/consumers_and_privileges.ts @@ -0,0 +1,742 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ + +import expect from '@kbn/expect'; +import { cleanup, generate, Dataset, PartialConfig } from '@kbn/data-forge'; +import { Aggregators } from '@kbn/observability-plugin/common/custom_threshold_rule/types'; +import { OBSERVABILITY_THRESHOLD_RULE_TYPE_ID } from '@kbn/rule-data-utils'; +import { COMPARATORS } from '@kbn/alerting-comparators'; +import type { InternalRequestHeader, RoleCredentials } from '@kbn/ftr-common-functional-services'; +import { DeploymentAgnosticFtrProviderContext } from '../../../../ftr_provider_context'; + +export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { + const esClient = getService('es'); + const supertestWithoutAuth = getService('supertestWithoutAuth'); + const esDeleteAllIndices = getService('esDeleteAllIndices'); + const logger = getService('log'); + const alertingApi = getService('alertingApi'); + const dataViewApi = getService('dataViewApi'); + const samlAuth = getService('samlAuth'); + const kibanaServer = getService('kibanaServer'); + let roleAuthc: RoleCredentials; + let internalReqHeader: InternalRequestHeader; + const config = getService('config'); + const isServerless = config.get('serverless'); + + describe('Custom Threshold Rule - consumers and priviledges', function () { + // skip until custom roles are supported in serverless + this.tags(['skipMKI']); + const CUSTOM_THRESHOLD_RULE_ALERT_INDEX_PATTERN = '.alerts-observability.threshold.alerts-*'; + const ALERT_ACTION_INDEX = 'alert-action-threshold'; + const DATA_VIEW = 'kbn-data-forge-fake_hosts.fake_hosts-*'; + const DATA_VIEW_ID = 'data-view-id'; + const DATA_VIEW_NAME = 'data-view-name'; + let dataForgeConfig: PartialConfig; + let dataForgeIndices: string[]; + let ruleId: string; + + before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: CUSTOM_THRESHOLD_RULE_ALERT_INDEX_PATTERN, + query: { match_all: {} }, + conflicts: 'proceed', + }); + roleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('editor'); + internalReqHeader = samlAuth.getInternalRequestHeader(); + dataForgeConfig = { + schedule: [ + { + template: 'good', + start: 'now-10m', + end: 'now+5m', + metrics: [ + { name: 'system.cpu.user.pct', method: 'linear', start: 2.5, end: 2.5 }, + { name: 'system.cpu.total.pct', method: 'linear', start: 0.5, end: 0.5 }, + { name: 'system.cpu.total.norm.pct', method: 'linear', start: 0.8, end: 0.8 }, + ], + }, + ], + indexing: { + dataset: 'fake_hosts' as Dataset, + eventsPerCycle: 1, + interval: 60000, + alignEventsToInterval: true, + }, + }; + dataForgeIndices = await generate({ client: esClient, config: dataForgeConfig, logger }); + await alertingApi.waitForDocumentInIndex({ + indexName: dataForgeIndices.join(','), + docCountTarget: 45, + }); + await dataViewApi.create({ + name: DATA_VIEW_NAME, + id: DATA_VIEW_ID, + title: DATA_VIEW, + roleAuthc, + }); + }); + + after(async () => { + await supertestWithoutAuth + .delete(`/api/alerting/rule/${ruleId}`) + .set(roleAuthc.apiKeyHeader) + .set(internalReqHeader); + if (ruleId) { + await esClient.deleteByQuery({ + index: '.kibana-event-log-*', + query: { term: { 'rule.id': ruleId } }, + conflicts: 'proceed', + }); + } + await dataViewApi.delete({ + id: DATA_VIEW_ID, + roleAuthc, + }); + await esDeleteAllIndices([ALERT_ACTION_INDEX, ...dataForgeIndices]); + await cleanup({ client: esClient, config: dataForgeConfig, logger }); + await samlAuth.invalidateM2mApiKeyWithRoleScope(roleAuthc); + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: CUSTOM_THRESHOLD_RULE_ALERT_INDEX_PATTERN, + query: { match_all: {} }, + conflicts: 'proceed', + }); + }); + + describe('Custom threshold - Rule visibility - consumer observability', () => { + const consumer = 'observability'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(roleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should be active and visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Custom threshold - Rule visibility - consumer alerts', () => { + const consumer = 'alerts'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(roleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should NOT visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + }); + }); + + describe('Custom threshold - Rule visibility - consumer logs', () => { + const consumer = 'logs'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(roleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Custom threshold - Rule visibility - consumer infrastructure', () => { + const consumer = 'infrastructure'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(roleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should be active and visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Custom threshold - Rule execution - consumer stackAlerts', () => { + const consumer = 'stackAlerts'; + + if (isServerless) { + it('is forbidden', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + expect(createdRule.statusCode).to.be(403); + }); + } else { + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(roleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should NOT be visible from logs role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from infra role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + } + + it('should NOT visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Custom threshold - Rule execution - consumer notavalidconsumer', () => { + const consumer = 'notavalidconsumer'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + expect(createdRule.statusCode).to.be(403); + expect(createdRule.message).to.be( + 'Unauthorized by "notavalidconsumer" to create "observability.rules.custom_threshold" rule' + ); + }); + }); + + describe('Custom threshold - Rule execution - consumer undefined', function () { + const consumer = undefined; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc, + // @ts-ignore + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + expect(createdRule.statusCode).to.be(400); + expect(createdRule.message).to.be( + '[request body.consumer]: expected value of type [string] but got [undefined]' + ); + }); + }); + + describe('Custom threshold - Rule creation - logs only role', function () { + const consumer = 'logs'; + let logsOnlyRole: RoleCredentials; + + it('creates rule successfully', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const createdRule = await alertingApi.createRule({ + roleAuthc: logsOnlyRole, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(logsOnlyRole, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from logs only role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('cannot create a rule with infrastructure consumer', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc: logsOnlyRole, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer: 'infrastructure' }), + }); + expect(createdRule.statusCode).to.be(403); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Custom threshold - Rule creation - infra only role', function () { + const consumer = 'infrastructure'; + let infraOnlyRole: RoleCredentials; + + it('creates rule successfully', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const createdRule = await alertingApi.createRule({ + roleAuthc: infraOnlyRole, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(roleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from logs only role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('cannot create a rule with logs consumer', async () => { + const createdRule = await alertingApi.createRule({ + roleAuthc: infraOnlyRole, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer: 'logs' }), + }); + expect(createdRule.statusCode).to.be(403); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Custom threshold - rule cannot be created - synthetics only role', function () { + const consumer = 'logs'; + it('creates rule successfully', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const response = await alertingApi.createRule({ + roleAuthc: syntheticsOnlyRole, + ...getRuleConfiguration({ dataViewId: DATA_VIEW_ID, consumer }), + }); + expect(response.statusCode).to.be(403); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + }); +} + +export const ROLES = { + infra_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + indexPatterns: ['all'], + infrastructure: ['all'], + }, + }, + ], + }, + logs_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + indexPatterns: ['all'], + logs: ['all'], + }, + }, + ], + }, + synthetics_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + uptime: ['all'], + }, + }, + ], + }, +}; + +const getRuleConfiguration = ({ + consumer, + dataViewId, +}: { + consumer: string; + dataViewId: string; +}) => ({ + tags: ['observability'], + consumer, + name: 'Threshold rule', + ruleTypeId: OBSERVABILITY_THRESHOLD_RULE_TYPE_ID, + params: { + criteria: [ + { + comparator: COMPARATORS.NOT_BETWEEN, + threshold: [1, 2], + timeSize: 1, + timeUnit: 'm' as const, + metrics: [{ name: 'A', filter: 'container.id:*', aggType: Aggregators.COUNT }], + }, + ], + alertOnNoData: true, + alertOnGroupDisappear: true, + searchConfiguration: { + query: { + query: 'host.name:*', + language: 'kuery', + }, + index: dataViewId, + }, + }, +}); diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/index.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/index.ts index ae9eb4a8d241..b8dbf335485c 100644 --- a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/index.ts +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/custom_threshold/index.ts @@ -18,5 +18,7 @@ export default function ({ loadTestFile }: DeploymentAgnosticFtrProviderContext) loadTestFile(require.resolve('./group_by_fired')); loadTestFile(require.resolve('./p99_pct_fired')); loadTestFile(require.resolve('./rate_bytes_fired')); + // moved to feature flag config until custom roles in serverless are supported + // loadTestFile(require.resolve('./consumers_and_privileges')); }); } diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/consumers_and_privileges.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/consumers_and_privileges.ts new file mode 100644 index 000000000000..e09f866ec602 --- /dev/null +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/consumers_and_privileges.ts @@ -0,0 +1,491 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ + +import expect from '@kbn/expect'; +import { RoleCredentials, InternalRequestHeader } from '@kbn/ftr-common-functional-services'; +import { DeploymentAgnosticFtrProviderContext } from '../../../../ftr_provider_context'; + +const RULE_TYPE_ID = '.es-query'; + +export default function ({ getService }: DeploymentAgnosticFtrProviderContext) { + const esClient = getService('es'); + const samlAuth = getService('samlAuth'); + const supertestWithoutAuth = getService('supertestWithoutAuth'); + const esDeleteAllIndices = getService('esDeleteAllIndices'); + const alertingApi = getService('alertingApi'); + const config = getService('config'); + const kibanaServer = getService('kibanaServer'); + const isServerless = config.get('serverless'); + + let editorRoleAuthc: RoleCredentials; + let internalReqHeader: InternalRequestHeader; + + describe('Query DSL - Consumers and privileges', function () { + // skip until custom roles are supported in serverless + this.tags(['skipInMKI']); + const ALERT_ACTION_INDEX = 'alert-action-es-query'; + const RULE_ALERT_INDEX = '.alerts-stack.alerts-default'; + let ruleId: string; + + before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX, + query: { match_all: {} }, + conflicts: 'proceed', + }); + editorRoleAuthc = await samlAuth.createM2mApiKeyWithRoleScope('editor'); + internalReqHeader = samlAuth.getInternalRequestHeader(); + }); + + after(async () => { + await supertestWithoutAuth + .delete(`/api/alerting/rule/${ruleId}`) + .set(editorRoleAuthc.apiKeyHeader) + .set(internalReqHeader); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX, + query: { match_all: {} }, + conflicts: 'proceed', + }); + await esClient.deleteByQuery({ + index: '.kibana-event-log-*', + query: { term: { 'rule.id': ruleId } }, + conflicts: 'proceed', + }); + await esDeleteAllIndices([ALERT_ACTION_INDEX]); + await samlAuth.invalidateM2mApiKeyWithRoleScope(editorRoleAuthc); + await kibanaServer.savedObjects.cleanStandardList(); + }); + + describe('Rule creation - logs consumer', () => { + const consumer = 'logs'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.helpers.createEsQueryRule({ + roleAuthc: editorRoleAuthc, + ...getESQueryRuleConfiguration({ consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should be active', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: editorRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(editorRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Rule creation - infrastructure consumer', () => { + const consumer = 'infrastructure'; + it('creates rule successfully', async () => { + const createdRule = await alertingApi.helpers.createEsQueryRule({ + roleAuthc: editorRoleAuthc, + ...getESQueryRuleConfiguration({ consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should be active', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: editorRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(editorRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from infrastructure only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Rule creation - observability consumer', () => { + const consumer = 'observability'; + + it('creates rule successfully', async () => { + const createdRule = await alertingApi.helpers.createEsQueryRule({ + roleAuthc: editorRoleAuthc, + ...getESQueryRuleConfiguration({ consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should be active and visible from editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: editorRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(editorRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should be active and visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + + describe('Rule creation - stackAlerts consumer', () => { + const consumer = 'stackAlerts'; + + if (isServerless) { + it('is forbidden', async () => { + await alertingApi.helpers.createEsQueryRule({ + roleAuthc: editorRoleAuthc, + ...getESQueryRuleConfiguration({ consumer }), + expectedStatusCode: 403, + }); + }); + } else { + it('creates rule successfully', async () => { + const createdRule = await alertingApi.helpers.createEsQueryRule({ + roleAuthc: editorRoleAuthc, + ...getESQueryRuleConfiguration({ consumer }), + }); + ruleId = createdRule.id; + expect(ruleId).not.to.be(undefined); + }); + + it('should find the created rule with correct information about the consumer', async () => { + const match = await alertingApi.findInRules(editorRoleAuthc, ruleId); + expect(match).not.to.be(undefined); + expect(match.consumer).to.be(consumer); + }); + + it('should be active and visible from the editor role', async () => { + const executionStatus = await alertingApi.waitForRuleStatus({ + roleAuthc: editorRoleAuthc, + ruleId, + expectedStatus: 'active', + }); + expect(executionStatus).to.be('active'); + }); + + it('should NOT be visible from logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + const logsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: logsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(logsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + + it('should NOT be visible from infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + const infraOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: infraOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(infraOnlyRole); + await samlAuth.deleteCustomRole(); + }); + } + + it('should NOT be visible from synthetics only role', async () => { + await samlAuth.setCustomRole(ROLES.synthetics_only); + + const syntheticsOnlyRole = await samlAuth.createM2mApiKeyWithCustomRoleScope(); + try { + await alertingApi.waitForRuleStatus({ + roleAuthc: syntheticsOnlyRole, + ruleId, + expectedStatus: 'active', + timeout: 1000 * 3, + }); + throw new Error('Expected rule to not be visible, but it was visible'); + } catch (error) { + expect(error.message).to.contain('timeout'); + } + + await samlAuth.invalidateM2mApiKeyWithRoleScope(syntheticsOnlyRole); + await samlAuth.deleteCustomRole(); + }); + }); + }); +} + +export const ROLES = { + infra_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + infrastructure: ['all'], + }, + }, + ], + }, + logs_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + logs: ['all'], + }, + }, + ], + }, + synthetics_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + uptime: ['all'], + }, + }, + ], + }, +}; + +export const getESQueryRuleConfiguration = ({ consumer }: { consumer: string }) => ({ + consumer, + name: 'always fire', + ruleTypeId: RULE_TYPE_ID, + params: { + size: 100, + thresholdComparator: '>', + threshold: [-1], + index: ['alert-test-data'], + timeField: 'date', + esQuery: `{\n \"query\":{\n \"match_all\" : {}\n }\n}`, + timeWindowSize: 20, + timeWindowUnit: 's', + }, + actions: [], +}); diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/index.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/index.ts index 8afdd96ad645..a4974278d91b 100644 --- a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/index.ts +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/es_query/index.ts @@ -11,5 +11,7 @@ export default function ({ loadTestFile }: DeploymentAgnosticFtrProviderContext) describe('ElasticSearch query rule', () => { loadTestFile(require.resolve('./query_dsl')); loadTestFile(require.resolve('./query_dsl_with_group_by')); + // movd to feature flag config until custom roles are supported in serverless + // loadTestFile(require.resolve('./consumers_and_privileges')); }); } diff --git a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/index.ts b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/index.ts index d8061694e7be..6455d07e28f9 100644 --- a/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/index.ts +++ b/x-pack/test/api_integration/deployment_agnostic/apis/observability/alerting/index.ts @@ -9,7 +9,7 @@ import { DeploymentAgnosticFtrProviderContext } from '../../../ftr_provider_cont export default function ({ loadTestFile }: DeploymentAgnosticFtrProviderContext) { describe('Observability Alerting', () => { - loadTestFile(require.resolve('./burn_rate_rule')); + loadTestFile(require.resolve('./burn_rate')); loadTestFile(require.resolve('./es_query')); loadTestFile(require.resolve('./custom_threshold')); }); diff --git a/x-pack/test/api_integration/deployment_agnostic/default_configs/feature_flag.serverless.config.base.ts b/x-pack/test/api_integration/deployment_agnostic/default_configs/feature_flag.serverless.config.base.ts index ba1ada4b14f7..8b2c92c85b0b 100644 --- a/x-pack/test/api_integration/deployment_agnostic/default_configs/feature_flag.serverless.config.base.ts +++ b/x-pack/test/api_integration/deployment_agnostic/default_configs/feature_flag.serverless.config.base.ts @@ -108,12 +108,9 @@ export function createServerlessFeatureFlagTestConfig { + return await retry.tryForTime(timeout, async () => { const response = await supertestWithoutAuth .get(`${spaceId ? '/s/' + spaceId : ''}/api/alerting/rule/${ruleId}`) .set(roleAuthc.apiKeyHeader) diff --git a/x-pack/test/observability_functional/apps/observability/pages/rules_page.ts b/x-pack/test/observability_functional/apps/observability/pages/rules_page.ts index d5b8ecd8be6c..8f876d981a2a 100644 --- a/x-pack/test/observability_functional/apps/observability/pages/rules_page.ts +++ b/x-pack/test/observability_functional/apps/observability/pages/rules_page.ts @@ -8,12 +8,17 @@ import expect from '@kbn/expect'; import { FtrProviderContext } from '../../../ftr_provider_context'; +const RULE_ALERT_INDEX_PATTERN = '.alerts-stack.alerts-*'; + export default ({ getService, getPageObjects }: FtrProviderContext) => { const esArchiver = getService('esArchiver'); const testSubjects = getService('testSubjects'); const supertest = getService('supertest'); const find = getService('find'); const retry = getService('retry'); + const rulesService = getService('rules'); + const esClient = getService('es'); + const kibanaServer = getService('kibanaServer'); const RULE_ENDPOINT = '/api/alerting/rule'; const INTERNAL_RULE_ENDPOINT = '/internal/alerting/rules'; @@ -111,11 +116,23 @@ export default ({ getService, getPageObjects }: FtrProviderContext) => { await esArchiver.load('x-pack/test/functional/es_archives/observability/alerts'); await esArchiver.load('x-pack/test/functional/es_archives/infra/metrics_and_logs'); await observability.alerts.common.navigateWithoutFilter(); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX_PATTERN, + query: { match_all: {} }, + conflicts: 'proceed', + }); + await kibanaServer.savedObjects.cleanStandardList(); }); after(async () => { await esArchiver.unload('x-pack/test/functional/es_archives/observability/alerts'); await esArchiver.unload('x-pack/test/functional/es_archives/infra/metrics_and_logs'); + await esClient.deleteByQuery({ + index: RULE_ALERT_INDEX_PATTERN, + query: { match_all: {} }, + conflicts: 'proceed', + }); + await kibanaServer.savedObjects.cleanStandardList(); }); describe('Feature flag', () => { @@ -382,5 +399,30 @@ export default ({ getService, getPageObjects }: FtrProviderContext) => { }); }); }); + + describe('Stack alerts consumer', () => { + it('should create an ES Query rule and NOT display it when consumer is stackAlerts', async () => { + const name = 'ES Query with stackAlerts consumer'; + await rulesService.api.createRule({ + name, + consumer: 'stackAlerts', + ruleTypeId: '.es-query', + params: { + size: 100, + thresholdComparator: '>', + threshold: [-1], + index: ['alert-test-data'], + timeField: 'date', + esQuery: `{\n \"query\":{\n \"match_all\" : {}\n }\n}`, + timeWindowSize: 20, + timeWindowUnit: 's', + }, + schedule: { interval: '1m' }, + }); + + await observability.alerts.common.navigateToRulesPage(); + await testSubjects.missingOrFail('rule-row'); + }); + }); }); }; diff --git a/x-pack/test_serverless/api_integration/test_suites/observability/config.feature_flags.ts b/x-pack/test_serverless/api_integration/test_suites/observability/config.feature_flags.ts index 5f9dd3acd336..4617a7b498e4 100644 --- a/x-pack/test_serverless/api_integration/test_suites/observability/config.feature_flags.ts +++ b/x-pack/test_serverless/api_integration/test_suites/observability/config.feature_flags.ts @@ -28,5 +28,5 @@ export default createTestConfig({ // include settings from project controller // https://github.com/elastic/project-controller/blob/main/internal/project/observability/config/elasticsearch.yml - esServerArgs: ['xpack.ml.dfa.enabled=false'], + esServerArgs: ['xpack.ml.dfa.enabled=false', 'xpack.security.authc.native_roles.enabled=true'], }); diff --git a/x-pack/test_serverless/api_integration/test_suites/observability/platform_security/authorization.ts b/x-pack/test_serverless/api_integration/test_suites/observability/platform_security/authorization.ts index 98ab300d980f..db184c4751a9 100644 --- a/x-pack/test_serverless/api_integration/test_suites/observability/platform_security/authorization.ts +++ b/x-pack/test_serverless/api_integration/test_suites/observability/platform_security/authorization.ts @@ -5,10 +5,18 @@ * 2.0. */ +import expect from 'expect'; +import type { Role } from '@kbn/security-plugin-types-common'; +import { SupertestWithRoleScopeType } from '../../../services'; import { FtrProviderContext } from '../../../ftr_provider_context'; export default function ({ getService }: FtrProviderContext) { const svlCommonApi = getService('svlCommonApi'); + const es = getService('es'); + const roleScopedSupertest = getService('roleScopedSupertest'); + const platformSecurityUtils = getService('platformSecurityUtils'); + let supertestAdminWithCookieCredentials: SupertestWithRoleScopeType; + let supertestAdminWithApiKey: SupertestWithRoleScopeType; describe('security/authorization', function () { describe('available features', () => { @@ -173,6 +181,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.error_rate/alerts/rule/scheduleBackfill", "alerting:apm.error_rate/alerts/rule/deleteBackfill", "alerting:apm.error_rate/alerts/rule/fillGaps", + "alerting:apm.error_rate/observability/rule/get", + "alerting:apm.error_rate/observability/rule/bulkGet", + "alerting:apm.error_rate/observability/rule/getRuleState", + "alerting:apm.error_rate/observability/rule/getAlertSummary", + "alerting:apm.error_rate/observability/rule/getExecutionLog", + "alerting:apm.error_rate/observability/rule/getActionErrorLog", + "alerting:apm.error_rate/observability/rule/find", + "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.error_rate/observability/rule/getBackfill", + "alerting:apm.error_rate/observability/rule/findBackfill", + "alerting:apm.error_rate/observability/rule/findGaps", + "alerting:apm.error_rate/observability/rule/create", + "alerting:apm.error_rate/observability/rule/delete", + "alerting:apm.error_rate/observability/rule/update", + "alerting:apm.error_rate/observability/rule/updateApiKey", + "alerting:apm.error_rate/observability/rule/enable", + "alerting:apm.error_rate/observability/rule/disable", + "alerting:apm.error_rate/observability/rule/muteAll", + "alerting:apm.error_rate/observability/rule/unmuteAll", + "alerting:apm.error_rate/observability/rule/muteAlert", + "alerting:apm.error_rate/observability/rule/unmuteAlert", + "alerting:apm.error_rate/observability/rule/snooze", + "alerting:apm.error_rate/observability/rule/bulkEdit", + "alerting:apm.error_rate/observability/rule/bulkDelete", + "alerting:apm.error_rate/observability/rule/bulkEnable", + "alerting:apm.error_rate/observability/rule/bulkDisable", + "alerting:apm.error_rate/observability/rule/unsnooze", + "alerting:apm.error_rate/observability/rule/runSoon", + "alerting:apm.error_rate/observability/rule/scheduleBackfill", + "alerting:apm.error_rate/observability/rule/deleteBackfill", + "alerting:apm.error_rate/observability/rule/fillGaps", "alerting:apm.transaction_error_rate/apm/rule/get", "alerting:apm.transaction_error_rate/apm/rule/bulkGet", "alerting:apm.transaction_error_rate/apm/rule/getRuleState", @@ -235,6 +274,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", + "alerting:apm.transaction_error_rate/observability/rule/get", + "alerting:apm.transaction_error_rate/observability/rule/bulkGet", + "alerting:apm.transaction_error_rate/observability/rule/getRuleState", + "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", + "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", + "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", + "alerting:apm.transaction_error_rate/observability/rule/find", + "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_error_rate/observability/rule/getBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findGaps", + "alerting:apm.transaction_error_rate/observability/rule/create", + "alerting:apm.transaction_error_rate/observability/rule/delete", + "alerting:apm.transaction_error_rate/observability/rule/update", + "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", + "alerting:apm.transaction_error_rate/observability/rule/enable", + "alerting:apm.transaction_error_rate/observability/rule/disable", + "alerting:apm.transaction_error_rate/observability/rule/muteAll", + "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", + "alerting:apm.transaction_error_rate/observability/rule/muteAlert", + "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", + "alerting:apm.transaction_error_rate/observability/rule/snooze", + "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", + "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", + "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", + "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", + "alerting:apm.transaction_error_rate/observability/rule/unsnooze", + "alerting:apm.transaction_error_rate/observability/rule/runSoon", + "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", + "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", + "alerting:apm.transaction_error_rate/observability/rule/fillGaps", "alerting:apm.transaction_duration/apm/rule/get", "alerting:apm.transaction_duration/apm/rule/bulkGet", "alerting:apm.transaction_duration/apm/rule/getRuleState", @@ -297,6 +367,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", "alerting:apm.transaction_duration/alerts/rule/fillGaps", + "alerting:apm.transaction_duration/observability/rule/get", + "alerting:apm.transaction_duration/observability/rule/bulkGet", + "alerting:apm.transaction_duration/observability/rule/getRuleState", + "alerting:apm.transaction_duration/observability/rule/getAlertSummary", + "alerting:apm.transaction_duration/observability/rule/getExecutionLog", + "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", + "alerting:apm.transaction_duration/observability/rule/find", + "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_duration/observability/rule/getBackfill", + "alerting:apm.transaction_duration/observability/rule/findBackfill", + "alerting:apm.transaction_duration/observability/rule/findGaps", + "alerting:apm.transaction_duration/observability/rule/create", + "alerting:apm.transaction_duration/observability/rule/delete", + "alerting:apm.transaction_duration/observability/rule/update", + "alerting:apm.transaction_duration/observability/rule/updateApiKey", + "alerting:apm.transaction_duration/observability/rule/enable", + "alerting:apm.transaction_duration/observability/rule/disable", + "alerting:apm.transaction_duration/observability/rule/muteAll", + "alerting:apm.transaction_duration/observability/rule/unmuteAll", + "alerting:apm.transaction_duration/observability/rule/muteAlert", + "alerting:apm.transaction_duration/observability/rule/unmuteAlert", + "alerting:apm.transaction_duration/observability/rule/snooze", + "alerting:apm.transaction_duration/observability/rule/bulkEdit", + "alerting:apm.transaction_duration/observability/rule/bulkDelete", + "alerting:apm.transaction_duration/observability/rule/bulkEnable", + "alerting:apm.transaction_duration/observability/rule/bulkDisable", + "alerting:apm.transaction_duration/observability/rule/unsnooze", + "alerting:apm.transaction_duration/observability/rule/runSoon", + "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", + "alerting:apm.transaction_duration/observability/rule/deleteBackfill", + "alerting:apm.transaction_duration/observability/rule/fillGaps", "alerting:apm.anomaly/apm/rule/get", "alerting:apm.anomaly/apm/rule/bulkGet", "alerting:apm.anomaly/apm/rule/getRuleState", @@ -359,468 +460,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/alerts/rule/scheduleBackfill", "alerting:apm.anomaly/alerts/rule/deleteBackfill", "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:apm.error_rate/apm/alert/get", - "alerting:apm.error_rate/apm/alert/find", - "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/apm/alert/getAlertSummary", - "alerting:apm.error_rate/apm/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/apm/alert/get", - "alerting:apm.transaction_error_rate/apm/alert/find", - "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/apm/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/apm/alert/get", - "alerting:apm.transaction_duration/apm/alert/find", - "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/apm/alert/getAlertSummary", - "alerting:apm.transaction_duration/apm/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/apm/alert/get", - "alerting:apm.anomaly/apm/alert/find", - "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/apm/alert/getAlertSummary", - "alerting:apm.anomaly/apm/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "api:infra", - "app:infra", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-ui-source/create", - "saved_object:infrastructure-ui-source/bulk_create", - "saved_object:infrastructure-ui-source/update", - "saved_object:infrastructure-ui-source/bulk_update", - "saved_object:infrastructure-ui-source/delete", - "saved_object:infrastructure-ui-source/bulk_delete", - "saved_object:infrastructure-ui-source/share_to_space", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/create", - "saved_object:infrastructure-monitoring-log-view/bulk_create", - "saved_object:infrastructure-monitoring-log-view/update", - "saved_object:infrastructure-monitoring-log-view/bulk_update", - "saved_object:infrastructure-monitoring-log-view/delete", - "saved_object:infrastructure-monitoring-log-view/bulk_delete", - "saved_object:infrastructure-monitoring-log-view/share_to_space", - "ui:logs/show", - "ui:logs/configureSource", - "ui:logs/save", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/rule/create", - "alerting:logs.alert.document.count/logs/rule/delete", - "alerting:logs.alert.document.count/logs/rule/update", - "alerting:logs.alert.document.count/logs/rule/updateApiKey", - "alerting:logs.alert.document.count/logs/rule/enable", - "alerting:logs.alert.document.count/logs/rule/disable", - "alerting:logs.alert.document.count/logs/rule/muteAll", - "alerting:logs.alert.document.count/logs/rule/unmuteAll", - "alerting:logs.alert.document.count/logs/rule/muteAlert", - "alerting:logs.alert.document.count/logs/rule/unmuteAlert", - "alerting:logs.alert.document.count/logs/rule/snooze", - "alerting:logs.alert.document.count/logs/rule/bulkEdit", - "alerting:logs.alert.document.count/logs/rule/bulkDelete", - "alerting:logs.alert.document.count/logs/rule/bulkEnable", - "alerting:logs.alert.document.count/logs/rule/bulkDisable", - "alerting:logs.alert.document.count/logs/rule/unsnooze", - "alerting:logs.alert.document.count/logs/rule/runSoon", - "alerting:logs.alert.document.count/logs/rule/scheduleBackfill", - "alerting:logs.alert.document.count/logs/rule/deleteBackfill", - "alerting:logs.alert.document.count/logs/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/logs/rule/create", - "alerting:.es-query/logs/rule/delete", - "alerting:.es-query/logs/rule/update", - "alerting:.es-query/logs/rule/updateApiKey", - "alerting:.es-query/logs/rule/enable", - "alerting:.es-query/logs/rule/disable", - "alerting:.es-query/logs/rule/muteAll", - "alerting:.es-query/logs/rule/unmuteAll", - "alerting:.es-query/logs/rule/muteAlert", - "alerting:.es-query/logs/rule/unmuteAlert", - "alerting:.es-query/logs/rule/snooze", - "alerting:.es-query/logs/rule/bulkEdit", - "alerting:.es-query/logs/rule/bulkDelete", - "alerting:.es-query/logs/rule/bulkEnable", - "alerting:.es-query/logs/rule/bulkDisable", - "alerting:.es-query/logs/rule/unsnooze", - "alerting:.es-query/logs/rule/runSoon", - "alerting:.es-query/logs/rule/scheduleBackfill", - "alerting:.es-query/logs/rule/deleteBackfill", - "alerting:.es-query/logs/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/create", - "alerting:observability.rules.custom_threshold/logs/rule/delete", - "alerting:observability.rules.custom_threshold/logs/rule/update", - "alerting:observability.rules.custom_threshold/logs/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/logs/rule/enable", - "alerting:observability.rules.custom_threshold/logs/rule/disable", - "alerting:observability.rules.custom_threshold/logs/rule/muteAll", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/logs/rule/muteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/snooze", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/logs/rule/unsnooze", - "alerting:observability.rules.custom_threshold/logs/rule/runSoon", - "alerting:observability.rules.custom_threshold/logs/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/logs/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/logs/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", "alerting:apm.anomaly/observability/rule/get", "alerting:apm.anomaly/observability/rule/bulkGet", "alerting:apm.anomaly/observability/rule/getRuleState", @@ -852,818 +491,66 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/observability/rule/scheduleBackfill", "alerting:apm.anomaly/observability/rule/deleteBackfill", "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", + "alerting:apm.error_rate/apm/alert/get", + "alerting:apm.error_rate/apm/alert/find", + "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/apm/alert/getAlertSummary", + "alerting:apm.error_rate/apm/alert/update", + "alerting:apm.error_rate/alerts/alert/get", + "alerting:apm.error_rate/alerts/alert/find", + "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/alerts/alert/getAlertSummary", + "alerting:apm.error_rate/alerts/alert/update", "alerting:apm.error_rate/observability/alert/get", "alerting:apm.error_rate/observability/alert/find", "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.error_rate/observability/alert/getAlertSummary", "alerting:apm.error_rate/observability/alert/update", + "alerting:apm.transaction_error_rate/apm/alert/get", + "alerting:apm.transaction_error_rate/apm/alert/find", + "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/apm/alert/update", + "alerting:apm.transaction_error_rate/alerts/alert/get", + "alerting:apm.transaction_error_rate/alerts/alert/find", + "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/alerts/alert/update", "alerting:apm.transaction_error_rate/observability/alert/get", "alerting:apm.transaction_error_rate/observability/alert/find", "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", "alerting:apm.transaction_error_rate/observability/alert/update", + "alerting:apm.transaction_duration/apm/alert/get", + "alerting:apm.transaction_duration/apm/alert/find", + "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/apm/alert/getAlertSummary", + "alerting:apm.transaction_duration/apm/alert/update", + "alerting:apm.transaction_duration/alerts/alert/get", + "alerting:apm.transaction_duration/alerts/alert/find", + "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", + "alerting:apm.transaction_duration/alerts/alert/update", "alerting:apm.transaction_duration/observability/alert/get", "alerting:apm.transaction_duration/observability/alert/find", "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_duration/observability/alert/getAlertSummary", "alerting:apm.transaction_duration/observability/alert/update", + "alerting:apm.anomaly/apm/alert/get", + "alerting:apm.anomaly/apm/alert/find", + "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/apm/alert/getAlertSummary", + "alerting:apm.anomaly/apm/alert/update", + "alerting:apm.anomaly/alerts/alert/get", + "alerting:apm.anomaly/alerts/alert/find", + "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/alerts/alert/getAlertSummary", + "alerting:apm.anomaly/alerts/alert/update", "alerting:apm.anomaly/observability/alert/get", "alerting:apm.anomaly/observability/alert/find", "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.anomaly/observability/alert/getAlertSummary", "alerting:apm.anomaly/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", ], "minimal_all": Array [ "login:", @@ -1786,6 +673,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.error_rate/alerts/rule/scheduleBackfill", "alerting:apm.error_rate/alerts/rule/deleteBackfill", "alerting:apm.error_rate/alerts/rule/fillGaps", + "alerting:apm.error_rate/observability/rule/get", + "alerting:apm.error_rate/observability/rule/bulkGet", + "alerting:apm.error_rate/observability/rule/getRuleState", + "alerting:apm.error_rate/observability/rule/getAlertSummary", + "alerting:apm.error_rate/observability/rule/getExecutionLog", + "alerting:apm.error_rate/observability/rule/getActionErrorLog", + "alerting:apm.error_rate/observability/rule/find", + "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.error_rate/observability/rule/getBackfill", + "alerting:apm.error_rate/observability/rule/findBackfill", + "alerting:apm.error_rate/observability/rule/findGaps", + "alerting:apm.error_rate/observability/rule/create", + "alerting:apm.error_rate/observability/rule/delete", + "alerting:apm.error_rate/observability/rule/update", + "alerting:apm.error_rate/observability/rule/updateApiKey", + "alerting:apm.error_rate/observability/rule/enable", + "alerting:apm.error_rate/observability/rule/disable", + "alerting:apm.error_rate/observability/rule/muteAll", + "alerting:apm.error_rate/observability/rule/unmuteAll", + "alerting:apm.error_rate/observability/rule/muteAlert", + "alerting:apm.error_rate/observability/rule/unmuteAlert", + "alerting:apm.error_rate/observability/rule/snooze", + "alerting:apm.error_rate/observability/rule/bulkEdit", + "alerting:apm.error_rate/observability/rule/bulkDelete", + "alerting:apm.error_rate/observability/rule/bulkEnable", + "alerting:apm.error_rate/observability/rule/bulkDisable", + "alerting:apm.error_rate/observability/rule/unsnooze", + "alerting:apm.error_rate/observability/rule/runSoon", + "alerting:apm.error_rate/observability/rule/scheduleBackfill", + "alerting:apm.error_rate/observability/rule/deleteBackfill", + "alerting:apm.error_rate/observability/rule/fillGaps", "alerting:apm.transaction_error_rate/apm/rule/get", "alerting:apm.transaction_error_rate/apm/rule/bulkGet", "alerting:apm.transaction_error_rate/apm/rule/getRuleState", @@ -1848,6 +766,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", + "alerting:apm.transaction_error_rate/observability/rule/get", + "alerting:apm.transaction_error_rate/observability/rule/bulkGet", + "alerting:apm.transaction_error_rate/observability/rule/getRuleState", + "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", + "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", + "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", + "alerting:apm.transaction_error_rate/observability/rule/find", + "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_error_rate/observability/rule/getBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findGaps", + "alerting:apm.transaction_error_rate/observability/rule/create", + "alerting:apm.transaction_error_rate/observability/rule/delete", + "alerting:apm.transaction_error_rate/observability/rule/update", + "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", + "alerting:apm.transaction_error_rate/observability/rule/enable", + "alerting:apm.transaction_error_rate/observability/rule/disable", + "alerting:apm.transaction_error_rate/observability/rule/muteAll", + "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", + "alerting:apm.transaction_error_rate/observability/rule/muteAlert", + "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", + "alerting:apm.transaction_error_rate/observability/rule/snooze", + "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", + "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", + "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", + "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", + "alerting:apm.transaction_error_rate/observability/rule/unsnooze", + "alerting:apm.transaction_error_rate/observability/rule/runSoon", + "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", + "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", + "alerting:apm.transaction_error_rate/observability/rule/fillGaps", "alerting:apm.transaction_duration/apm/rule/get", "alerting:apm.transaction_duration/apm/rule/bulkGet", "alerting:apm.transaction_duration/apm/rule/getRuleState", @@ -1910,6 +859,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", "alerting:apm.transaction_duration/alerts/rule/fillGaps", + "alerting:apm.transaction_duration/observability/rule/get", + "alerting:apm.transaction_duration/observability/rule/bulkGet", + "alerting:apm.transaction_duration/observability/rule/getRuleState", + "alerting:apm.transaction_duration/observability/rule/getAlertSummary", + "alerting:apm.transaction_duration/observability/rule/getExecutionLog", + "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", + "alerting:apm.transaction_duration/observability/rule/find", + "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_duration/observability/rule/getBackfill", + "alerting:apm.transaction_duration/observability/rule/findBackfill", + "alerting:apm.transaction_duration/observability/rule/findGaps", + "alerting:apm.transaction_duration/observability/rule/create", + "alerting:apm.transaction_duration/observability/rule/delete", + "alerting:apm.transaction_duration/observability/rule/update", + "alerting:apm.transaction_duration/observability/rule/updateApiKey", + "alerting:apm.transaction_duration/observability/rule/enable", + "alerting:apm.transaction_duration/observability/rule/disable", + "alerting:apm.transaction_duration/observability/rule/muteAll", + "alerting:apm.transaction_duration/observability/rule/unmuteAll", + "alerting:apm.transaction_duration/observability/rule/muteAlert", + "alerting:apm.transaction_duration/observability/rule/unmuteAlert", + "alerting:apm.transaction_duration/observability/rule/snooze", + "alerting:apm.transaction_duration/observability/rule/bulkEdit", + "alerting:apm.transaction_duration/observability/rule/bulkDelete", + "alerting:apm.transaction_duration/observability/rule/bulkEnable", + "alerting:apm.transaction_duration/observability/rule/bulkDisable", + "alerting:apm.transaction_duration/observability/rule/unsnooze", + "alerting:apm.transaction_duration/observability/rule/runSoon", + "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", + "alerting:apm.transaction_duration/observability/rule/deleteBackfill", + "alerting:apm.transaction_duration/observability/rule/fillGaps", "alerting:apm.anomaly/apm/rule/get", "alerting:apm.anomaly/apm/rule/bulkGet", "alerting:apm.anomaly/apm/rule/getRuleState", @@ -1972,468 +952,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/alerts/rule/scheduleBackfill", "alerting:apm.anomaly/alerts/rule/deleteBackfill", "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:apm.error_rate/apm/alert/get", - "alerting:apm.error_rate/apm/alert/find", - "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/apm/alert/getAlertSummary", - "alerting:apm.error_rate/apm/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/apm/alert/get", - "alerting:apm.transaction_error_rate/apm/alert/find", - "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/apm/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/apm/alert/get", - "alerting:apm.transaction_duration/apm/alert/find", - "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/apm/alert/getAlertSummary", - "alerting:apm.transaction_duration/apm/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/apm/alert/get", - "alerting:apm.anomaly/apm/alert/find", - "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/apm/alert/getAlertSummary", - "alerting:apm.anomaly/apm/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "api:infra", - "app:infra", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-ui-source/create", - "saved_object:infrastructure-ui-source/bulk_create", - "saved_object:infrastructure-ui-source/update", - "saved_object:infrastructure-ui-source/bulk_update", - "saved_object:infrastructure-ui-source/delete", - "saved_object:infrastructure-ui-source/bulk_delete", - "saved_object:infrastructure-ui-source/share_to_space", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/create", - "saved_object:infrastructure-monitoring-log-view/bulk_create", - "saved_object:infrastructure-monitoring-log-view/update", - "saved_object:infrastructure-monitoring-log-view/bulk_update", - "saved_object:infrastructure-monitoring-log-view/delete", - "saved_object:infrastructure-monitoring-log-view/bulk_delete", - "saved_object:infrastructure-monitoring-log-view/share_to_space", - "ui:logs/show", - "ui:logs/configureSource", - "ui:logs/save", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/rule/create", - "alerting:logs.alert.document.count/logs/rule/delete", - "alerting:logs.alert.document.count/logs/rule/update", - "alerting:logs.alert.document.count/logs/rule/updateApiKey", - "alerting:logs.alert.document.count/logs/rule/enable", - "alerting:logs.alert.document.count/logs/rule/disable", - "alerting:logs.alert.document.count/logs/rule/muteAll", - "alerting:logs.alert.document.count/logs/rule/unmuteAll", - "alerting:logs.alert.document.count/logs/rule/muteAlert", - "alerting:logs.alert.document.count/logs/rule/unmuteAlert", - "alerting:logs.alert.document.count/logs/rule/snooze", - "alerting:logs.alert.document.count/logs/rule/bulkEdit", - "alerting:logs.alert.document.count/logs/rule/bulkDelete", - "alerting:logs.alert.document.count/logs/rule/bulkEnable", - "alerting:logs.alert.document.count/logs/rule/bulkDisable", - "alerting:logs.alert.document.count/logs/rule/unsnooze", - "alerting:logs.alert.document.count/logs/rule/runSoon", - "alerting:logs.alert.document.count/logs/rule/scheduleBackfill", - "alerting:logs.alert.document.count/logs/rule/deleteBackfill", - "alerting:logs.alert.document.count/logs/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/logs/rule/create", - "alerting:.es-query/logs/rule/delete", - "alerting:.es-query/logs/rule/update", - "alerting:.es-query/logs/rule/updateApiKey", - "alerting:.es-query/logs/rule/enable", - "alerting:.es-query/logs/rule/disable", - "alerting:.es-query/logs/rule/muteAll", - "alerting:.es-query/logs/rule/unmuteAll", - "alerting:.es-query/logs/rule/muteAlert", - "alerting:.es-query/logs/rule/unmuteAlert", - "alerting:.es-query/logs/rule/snooze", - "alerting:.es-query/logs/rule/bulkEdit", - "alerting:.es-query/logs/rule/bulkDelete", - "alerting:.es-query/logs/rule/bulkEnable", - "alerting:.es-query/logs/rule/bulkDisable", - "alerting:.es-query/logs/rule/unsnooze", - "alerting:.es-query/logs/rule/runSoon", - "alerting:.es-query/logs/rule/scheduleBackfill", - "alerting:.es-query/logs/rule/deleteBackfill", - "alerting:.es-query/logs/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/create", - "alerting:observability.rules.custom_threshold/logs/rule/delete", - "alerting:observability.rules.custom_threshold/logs/rule/update", - "alerting:observability.rules.custom_threshold/logs/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/logs/rule/enable", - "alerting:observability.rules.custom_threshold/logs/rule/disable", - "alerting:observability.rules.custom_threshold/logs/rule/muteAll", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/logs/rule/muteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/snooze", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/logs/rule/unsnooze", - "alerting:observability.rules.custom_threshold/logs/rule/runSoon", - "alerting:observability.rules.custom_threshold/logs/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/logs/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/logs/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", "alerting:apm.anomaly/observability/rule/get", "alerting:apm.anomaly/observability/rule/bulkGet", "alerting:apm.anomaly/observability/rule/getRuleState", @@ -2465,818 +983,66 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/observability/rule/scheduleBackfill", "alerting:apm.anomaly/observability/rule/deleteBackfill", "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", + "alerting:apm.error_rate/apm/alert/get", + "alerting:apm.error_rate/apm/alert/find", + "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/apm/alert/getAlertSummary", + "alerting:apm.error_rate/apm/alert/update", + "alerting:apm.error_rate/alerts/alert/get", + "alerting:apm.error_rate/alerts/alert/find", + "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/alerts/alert/getAlertSummary", + "alerting:apm.error_rate/alerts/alert/update", "alerting:apm.error_rate/observability/alert/get", "alerting:apm.error_rate/observability/alert/find", "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.error_rate/observability/alert/getAlertSummary", "alerting:apm.error_rate/observability/alert/update", + "alerting:apm.transaction_error_rate/apm/alert/get", + "alerting:apm.transaction_error_rate/apm/alert/find", + "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/apm/alert/update", + "alerting:apm.transaction_error_rate/alerts/alert/get", + "alerting:apm.transaction_error_rate/alerts/alert/find", + "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/alerts/alert/update", "alerting:apm.transaction_error_rate/observability/alert/get", "alerting:apm.transaction_error_rate/observability/alert/find", "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", "alerting:apm.transaction_error_rate/observability/alert/update", + "alerting:apm.transaction_duration/apm/alert/get", + "alerting:apm.transaction_duration/apm/alert/find", + "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/apm/alert/getAlertSummary", + "alerting:apm.transaction_duration/apm/alert/update", + "alerting:apm.transaction_duration/alerts/alert/get", + "alerting:apm.transaction_duration/alerts/alert/find", + "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", + "alerting:apm.transaction_duration/alerts/alert/update", "alerting:apm.transaction_duration/observability/alert/get", "alerting:apm.transaction_duration/observability/alert/find", "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_duration/observability/alert/getAlertSummary", "alerting:apm.transaction_duration/observability/alert/update", + "alerting:apm.anomaly/apm/alert/get", + "alerting:apm.anomaly/apm/alert/find", + "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/apm/alert/getAlertSummary", + "alerting:apm.anomaly/apm/alert/update", + "alerting:apm.anomaly/alerts/alert/get", + "alerting:apm.anomaly/alerts/alert/find", + "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/alerts/alert/getAlertSummary", + "alerting:apm.anomaly/alerts/alert/update", "alerting:apm.anomaly/observability/alert/get", "alerting:apm.anomaly/observability/alert/find", "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.anomaly/observability/alert/getAlertSummary", "alerting:apm.anomaly/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", ], "minimal_read": Array [ "login:", @@ -3349,6 +1115,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.error_rate/alerts/rule/getBackfill", "alerting:apm.error_rate/alerts/rule/findBackfill", "alerting:apm.error_rate/alerts/rule/findGaps", + "alerting:apm.error_rate/observability/rule/get", + "alerting:apm.error_rate/observability/rule/bulkGet", + "alerting:apm.error_rate/observability/rule/getRuleState", + "alerting:apm.error_rate/observability/rule/getAlertSummary", + "alerting:apm.error_rate/observability/rule/getExecutionLog", + "alerting:apm.error_rate/observability/rule/getActionErrorLog", + "alerting:apm.error_rate/observability/rule/find", + "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.error_rate/observability/rule/getBackfill", + "alerting:apm.error_rate/observability/rule/findBackfill", + "alerting:apm.error_rate/observability/rule/findGaps", "alerting:apm.transaction_error_rate/apm/rule/get", "alerting:apm.transaction_error_rate/apm/rule/bulkGet", "alerting:apm.transaction_error_rate/apm/rule/getRuleState", @@ -3371,6 +1148,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", "alerting:apm.transaction_error_rate/alerts/rule/findGaps", + "alerting:apm.transaction_error_rate/observability/rule/get", + "alerting:apm.transaction_error_rate/observability/rule/bulkGet", + "alerting:apm.transaction_error_rate/observability/rule/getRuleState", + "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", + "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", + "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", + "alerting:apm.transaction_error_rate/observability/rule/find", + "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_error_rate/observability/rule/getBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findGaps", "alerting:apm.transaction_duration/apm/rule/get", "alerting:apm.transaction_duration/apm/rule/bulkGet", "alerting:apm.transaction_duration/apm/rule/getRuleState", @@ -3393,6 +1181,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_duration/alerts/rule/getBackfill", "alerting:apm.transaction_duration/alerts/rule/findBackfill", "alerting:apm.transaction_duration/alerts/rule/findGaps", + "alerting:apm.transaction_duration/observability/rule/get", + "alerting:apm.transaction_duration/observability/rule/bulkGet", + "alerting:apm.transaction_duration/observability/rule/getRuleState", + "alerting:apm.transaction_duration/observability/rule/getAlertSummary", + "alerting:apm.transaction_duration/observability/rule/getExecutionLog", + "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", + "alerting:apm.transaction_duration/observability/rule/find", + "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_duration/observability/rule/getBackfill", + "alerting:apm.transaction_duration/observability/rule/findBackfill", + "alerting:apm.transaction_duration/observability/rule/findGaps", "alerting:apm.anomaly/apm/rule/get", "alerting:apm.anomaly/apm/rule/bulkGet", "alerting:apm.anomaly/apm/rule/getRuleState", @@ -3415,215 +1214,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/alerts/rule/getBackfill", "alerting:apm.anomaly/alerts/rule/findBackfill", "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.error_rate/apm/alert/get", - "alerting:apm.error_rate/apm/alert/find", - "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/apm/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/apm/alert/get", - "alerting:apm.transaction_error_rate/apm/alert/find", - "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/apm/alert/get", - "alerting:apm.transaction_duration/apm/alert/find", - "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/apm/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/apm/alert/get", - "alerting:apm.anomaly/apm/alert/find", - "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/apm/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "api:infra", - "app:infra", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "ui:logs/show", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", "alerting:apm.anomaly/observability/rule/get", "alerting:apm.anomaly/observability/rule/bulkGet", "alerting:apm.anomaly/observability/rule/getRuleState", @@ -3635,352 +1225,54 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/observability/rule/getBackfill", "alerting:apm.anomaly/observability/rule/findBackfill", "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", + "alerting:apm.error_rate/apm/alert/get", + "alerting:apm.error_rate/apm/alert/find", + "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/apm/alert/getAlertSummary", + "alerting:apm.error_rate/alerts/alert/get", + "alerting:apm.error_rate/alerts/alert/find", + "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/alerts/alert/getAlertSummary", "alerting:apm.error_rate/observability/alert/get", "alerting:apm.error_rate/observability/alert/find", "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.error_rate/observability/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/apm/alert/get", + "alerting:apm.transaction_error_rate/apm/alert/find", + "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/alerts/alert/get", + "alerting:apm.transaction_error_rate/alerts/alert/find", + "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", "alerting:apm.transaction_error_rate/observability/alert/get", "alerting:apm.transaction_error_rate/observability/alert/find", "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", + "alerting:apm.transaction_duration/apm/alert/get", + "alerting:apm.transaction_duration/apm/alert/find", + "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/apm/alert/getAlertSummary", + "alerting:apm.transaction_duration/alerts/alert/get", + "alerting:apm.transaction_duration/alerts/alert/find", + "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", "alerting:apm.transaction_duration/observability/alert/get", "alerting:apm.transaction_duration/observability/alert/find", "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_duration/observability/alert/getAlertSummary", + "alerting:apm.anomaly/apm/alert/get", + "alerting:apm.anomaly/apm/alert/find", + "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/apm/alert/getAlertSummary", + "alerting:apm.anomaly/alerts/alert/get", + "alerting:apm.anomaly/alerts/alert/find", + "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/alerts/alert/getAlertSummary", "alerting:apm.anomaly/observability/alert/get", "alerting:apm.anomaly/observability/alert/find", "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", ], "read": Array [ "login:", @@ -4053,6 +1345,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.error_rate/alerts/rule/getBackfill", "alerting:apm.error_rate/alerts/rule/findBackfill", "alerting:apm.error_rate/alerts/rule/findGaps", + "alerting:apm.error_rate/observability/rule/get", + "alerting:apm.error_rate/observability/rule/bulkGet", + "alerting:apm.error_rate/observability/rule/getRuleState", + "alerting:apm.error_rate/observability/rule/getAlertSummary", + "alerting:apm.error_rate/observability/rule/getExecutionLog", + "alerting:apm.error_rate/observability/rule/getActionErrorLog", + "alerting:apm.error_rate/observability/rule/find", + "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.error_rate/observability/rule/getBackfill", + "alerting:apm.error_rate/observability/rule/findBackfill", + "alerting:apm.error_rate/observability/rule/findGaps", "alerting:apm.transaction_error_rate/apm/rule/get", "alerting:apm.transaction_error_rate/apm/rule/bulkGet", "alerting:apm.transaction_error_rate/apm/rule/getRuleState", @@ -4075,6 +1378,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", "alerting:apm.transaction_error_rate/alerts/rule/findGaps", + "alerting:apm.transaction_error_rate/observability/rule/get", + "alerting:apm.transaction_error_rate/observability/rule/bulkGet", + "alerting:apm.transaction_error_rate/observability/rule/getRuleState", + "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", + "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", + "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", + "alerting:apm.transaction_error_rate/observability/rule/find", + "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_error_rate/observability/rule/getBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findBackfill", + "alerting:apm.transaction_error_rate/observability/rule/findGaps", "alerting:apm.transaction_duration/apm/rule/get", "alerting:apm.transaction_duration/apm/rule/bulkGet", "alerting:apm.transaction_duration/apm/rule/getRuleState", @@ -4097,6 +1411,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.transaction_duration/alerts/rule/getBackfill", "alerting:apm.transaction_duration/alerts/rule/findBackfill", "alerting:apm.transaction_duration/alerts/rule/findGaps", + "alerting:apm.transaction_duration/observability/rule/get", + "alerting:apm.transaction_duration/observability/rule/bulkGet", + "alerting:apm.transaction_duration/observability/rule/getRuleState", + "alerting:apm.transaction_duration/observability/rule/getAlertSummary", + "alerting:apm.transaction_duration/observability/rule/getExecutionLog", + "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", + "alerting:apm.transaction_duration/observability/rule/find", + "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", + "alerting:apm.transaction_duration/observability/rule/getBackfill", + "alerting:apm.transaction_duration/observability/rule/findBackfill", + "alerting:apm.transaction_duration/observability/rule/findGaps", "alerting:apm.anomaly/apm/rule/get", "alerting:apm.anomaly/apm/rule/bulkGet", "alerting:apm.anomaly/apm/rule/getRuleState", @@ -4119,215 +1444,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/alerts/rule/getBackfill", "alerting:apm.anomaly/alerts/rule/findBackfill", "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.error_rate/apm/alert/get", - "alerting:apm.error_rate/apm/alert/find", - "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/apm/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/apm/alert/get", - "alerting:apm.transaction_error_rate/apm/alert/find", - "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/apm/alert/get", - "alerting:apm.transaction_duration/apm/alert/find", - "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/apm/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/apm/alert/get", - "alerting:apm.anomaly/apm/alert/find", - "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/apm/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "api:infra", - "app:infra", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "ui:logs/show", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", "alerting:apm.anomaly/observability/rule/get", "alerting:apm.anomaly/observability/rule/bulkGet", "alerting:apm.anomaly/observability/rule/getRuleState", @@ -4339,352 +1455,54 @@ export default function ({ getService }: FtrProviderContext) { "alerting:apm.anomaly/observability/rule/getBackfill", "alerting:apm.anomaly/observability/rule/findBackfill", "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", + "alerting:apm.error_rate/apm/alert/get", + "alerting:apm.error_rate/apm/alert/find", + "alerting:apm.error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/apm/alert/getAlertSummary", + "alerting:apm.error_rate/alerts/alert/get", + "alerting:apm.error_rate/alerts/alert/find", + "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.error_rate/alerts/alert/getAlertSummary", "alerting:apm.error_rate/observability/alert/get", "alerting:apm.error_rate/observability/alert/find", "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.error_rate/observability/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/apm/alert/get", + "alerting:apm.transaction_error_rate/apm/alert/find", + "alerting:apm.transaction_error_rate/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/apm/alert/getAlertSummary", + "alerting:apm.transaction_error_rate/alerts/alert/get", + "alerting:apm.transaction_error_rate/alerts/alert/find", + "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", "alerting:apm.transaction_error_rate/observability/alert/get", "alerting:apm.transaction_error_rate/observability/alert/find", "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", + "alerting:apm.transaction_duration/apm/alert/get", + "alerting:apm.transaction_duration/apm/alert/find", + "alerting:apm.transaction_duration/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/apm/alert/getAlertSummary", + "alerting:apm.transaction_duration/alerts/alert/get", + "alerting:apm.transaction_duration/alerts/alert/find", + "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", "alerting:apm.transaction_duration/observability/alert/get", "alerting:apm.transaction_duration/observability/alert/find", "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.transaction_duration/observability/alert/getAlertSummary", + "alerting:apm.anomaly/apm/alert/get", + "alerting:apm.anomaly/apm/alert/find", + "alerting:apm.anomaly/apm/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/apm/alert/getAlertSummary", + "alerting:apm.anomaly/alerts/alert/get", + "alerting:apm.anomaly/alerts/alert/find", + "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:apm.anomaly/alerts/alert/getAlertSummary", "alerting:apm.anomaly/observability/alert/get", "alerting:apm.anomaly/observability/alert/find", "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", ], "settings_save": Array [ "login:", @@ -6027,1236 +2845,6 @@ export default function ({ getService }: FtrProviderContext) { "ui:discover/createShortUrl", "ui:discover/storeSearchSession", "ui:discover/generateCsv", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", "ui:discover_v2/show", "ui:discover_v2/save", "ui:discover_v2/createShortUrl", @@ -7351,1236 +2939,6 @@ export default function ({ getService }: FtrProviderContext) { "ui:discover/show", "ui:discover/save", "ui:discover/saveQuery", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", "ui:discover_v2/show", "ui:discover_v2/save", "ui:savedQueryManagement/showQueries", @@ -8640,521 +2998,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/open_point_in_time", "saved_object:cloud/close_point_in_time", "ui:discover/show", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", "ui:discover_v2/show", "ui:savedQueryManagement/showQueries", ], @@ -9220,521 +3063,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/close_point_in_time", "ui:discover/show", "ui:discover/createShortUrl", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", "ui:discover_v2/show", "ui:discover_v2/createShortUrl", "ui:savedQueryManagement/showQueries", @@ -9867,1236 +3195,6 @@ export default function ({ getService }: FtrProviderContext) { "ui:discover_v2/createShortUrl", "ui:discover_v2/storeSearchSession", "ui:discover_v2/generateCsv", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", ], "generate_report": Array [ "login:", @@ -11168,1236 +3266,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/close_point_in_time", "ui:discover_v2/show", "ui:discover_v2/save", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", ], "minimal_read": Array [ "login:", @@ -12447,521 +3315,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/open_point_in_time", "saved_object:cloud/close_point_in_time", "ui:discover_v2/show", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", ], "read": Array [ "login:", @@ -13019,521 +3372,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/close_point_in_time", "ui:discover_v2/show", "ui:discover_v2/createShortUrl", - "api:rac", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", ], "store_search_session": Array [ "login:", @@ -14205,334 +4043,6 @@ export default function ({ getService }: FtrProviderContext) { "ui:fleetv2/agent_policies_all", "ui:fleetv2/settings_read", "ui:fleetv2/settings_all", - "api:infra", - "api:rac", - "app:infra", - "app:logs", - "app:kibana", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:management/insightsAndAlerting/triggersActions", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/kibana", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-ui-source/create", - "saved_object:infrastructure-ui-source/bulk_create", - "saved_object:infrastructure-ui-source/update", - "saved_object:infrastructure-ui-source/bulk_update", - "saved_object:infrastructure-ui-source/delete", - "saved_object:infrastructure-ui-source/bulk_delete", - "saved_object:infrastructure-ui-source/share_to_space", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/create", - "saved_object:infrastructure-monitoring-log-view/bulk_create", - "saved_object:infrastructure-monitoring-log-view/update", - "saved_object:infrastructure-monitoring-log-view/bulk_update", - "saved_object:infrastructure-monitoring-log-view/delete", - "saved_object:infrastructure-monitoring-log-view/bulk_delete", - "saved_object:infrastructure-monitoring-log-view/share_to_space", - "ui:logs/show", - "ui:logs/configureSource", - "ui:logs/save", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/rule/create", - "alerting:logs.alert.document.count/logs/rule/delete", - "alerting:logs.alert.document.count/logs/rule/update", - "alerting:logs.alert.document.count/logs/rule/updateApiKey", - "alerting:logs.alert.document.count/logs/rule/enable", - "alerting:logs.alert.document.count/logs/rule/disable", - "alerting:logs.alert.document.count/logs/rule/muteAll", - "alerting:logs.alert.document.count/logs/rule/unmuteAll", - "alerting:logs.alert.document.count/logs/rule/muteAlert", - "alerting:logs.alert.document.count/logs/rule/unmuteAlert", - "alerting:logs.alert.document.count/logs/rule/snooze", - "alerting:logs.alert.document.count/logs/rule/bulkEdit", - "alerting:logs.alert.document.count/logs/rule/bulkDelete", - "alerting:logs.alert.document.count/logs/rule/bulkEnable", - "alerting:logs.alert.document.count/logs/rule/bulkDisable", - "alerting:logs.alert.document.count/logs/rule/unsnooze", - "alerting:logs.alert.document.count/logs/rule/runSoon", - "alerting:logs.alert.document.count/logs/rule/scheduleBackfill", - "alerting:logs.alert.document.count/logs/rule/deleteBackfill", - "alerting:logs.alert.document.count/logs/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/logs/rule/create", - "alerting:.es-query/logs/rule/delete", - "alerting:.es-query/logs/rule/update", - "alerting:.es-query/logs/rule/updateApiKey", - "alerting:.es-query/logs/rule/enable", - "alerting:.es-query/logs/rule/disable", - "alerting:.es-query/logs/rule/muteAll", - "alerting:.es-query/logs/rule/unmuteAll", - "alerting:.es-query/logs/rule/muteAlert", - "alerting:.es-query/logs/rule/unmuteAlert", - "alerting:.es-query/logs/rule/snooze", - "alerting:.es-query/logs/rule/bulkEdit", - "alerting:.es-query/logs/rule/bulkDelete", - "alerting:.es-query/logs/rule/bulkEnable", - "alerting:.es-query/logs/rule/bulkDisable", - "alerting:.es-query/logs/rule/unsnooze", - "alerting:.es-query/logs/rule/runSoon", - "alerting:.es-query/logs/rule/scheduleBackfill", - "alerting:.es-query/logs/rule/deleteBackfill", - "alerting:.es-query/logs/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/create", - "alerting:observability.rules.custom_threshold/logs/rule/delete", - "alerting:observability.rules.custom_threshold/logs/rule/update", - "alerting:observability.rules.custom_threshold/logs/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/logs/rule/enable", - "alerting:observability.rules.custom_threshold/logs/rule/disable", - "alerting:observability.rules.custom_threshold/logs/rule/muteAll", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/logs/rule/muteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/snooze", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/logs/rule/unsnooze", - "alerting:observability.rules.custom_threshold/logs/rule/runSoon", - "alerting:observability.rules.custom_threshold/logs/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/logs/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/logs/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", ], "minimal_all": Array [ "login:", @@ -14724,334 +4234,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/close_point_in_time", "ui:fleetv2/read", "ui:fleetv2/all", - "api:infra", - "api:rac", - "app:infra", - "app:logs", - "app:kibana", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:management/insightsAndAlerting/triggersActions", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/kibana", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-ui-source/create", - "saved_object:infrastructure-ui-source/bulk_create", - "saved_object:infrastructure-ui-source/update", - "saved_object:infrastructure-ui-source/bulk_update", - "saved_object:infrastructure-ui-source/delete", - "saved_object:infrastructure-ui-source/bulk_delete", - "saved_object:infrastructure-ui-source/share_to_space", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/create", - "saved_object:infrastructure-monitoring-log-view/bulk_create", - "saved_object:infrastructure-monitoring-log-view/update", - "saved_object:infrastructure-monitoring-log-view/bulk_update", - "saved_object:infrastructure-monitoring-log-view/delete", - "saved_object:infrastructure-monitoring-log-view/bulk_delete", - "saved_object:infrastructure-monitoring-log-view/share_to_space", - "ui:logs/show", - "ui:logs/configureSource", - "ui:logs/save", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/rule/create", - "alerting:logs.alert.document.count/logs/rule/delete", - "alerting:logs.alert.document.count/logs/rule/update", - "alerting:logs.alert.document.count/logs/rule/updateApiKey", - "alerting:logs.alert.document.count/logs/rule/enable", - "alerting:logs.alert.document.count/logs/rule/disable", - "alerting:logs.alert.document.count/logs/rule/muteAll", - "alerting:logs.alert.document.count/logs/rule/unmuteAll", - "alerting:logs.alert.document.count/logs/rule/muteAlert", - "alerting:logs.alert.document.count/logs/rule/unmuteAlert", - "alerting:logs.alert.document.count/logs/rule/snooze", - "alerting:logs.alert.document.count/logs/rule/bulkEdit", - "alerting:logs.alert.document.count/logs/rule/bulkDelete", - "alerting:logs.alert.document.count/logs/rule/bulkEnable", - "alerting:logs.alert.document.count/logs/rule/bulkDisable", - "alerting:logs.alert.document.count/logs/rule/unsnooze", - "alerting:logs.alert.document.count/logs/rule/runSoon", - "alerting:logs.alert.document.count/logs/rule/scheduleBackfill", - "alerting:logs.alert.document.count/logs/rule/deleteBackfill", - "alerting:logs.alert.document.count/logs/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/logs/rule/create", - "alerting:.es-query/logs/rule/delete", - "alerting:.es-query/logs/rule/update", - "alerting:.es-query/logs/rule/updateApiKey", - "alerting:.es-query/logs/rule/enable", - "alerting:.es-query/logs/rule/disable", - "alerting:.es-query/logs/rule/muteAll", - "alerting:.es-query/logs/rule/unmuteAll", - "alerting:.es-query/logs/rule/muteAlert", - "alerting:.es-query/logs/rule/unmuteAlert", - "alerting:.es-query/logs/rule/snooze", - "alerting:.es-query/logs/rule/bulkEdit", - "alerting:.es-query/logs/rule/bulkDelete", - "alerting:.es-query/logs/rule/bulkEnable", - "alerting:.es-query/logs/rule/bulkDisable", - "alerting:.es-query/logs/rule/unsnooze", - "alerting:.es-query/logs/rule/runSoon", - "alerting:.es-query/logs/rule/scheduleBackfill", - "alerting:.es-query/logs/rule/deleteBackfill", - "alerting:.es-query/logs/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/create", - "alerting:observability.rules.custom_threshold/logs/rule/delete", - "alerting:observability.rules.custom_threshold/logs/rule/update", - "alerting:observability.rules.custom_threshold/logs/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/logs/rule/enable", - "alerting:observability.rules.custom_threshold/logs/rule/disable", - "alerting:observability.rules.custom_threshold/logs/rule/muteAll", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/logs/rule/muteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/snooze", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/logs/rule/unsnooze", - "alerting:observability.rules.custom_threshold/logs/rule/runSoon", - "alerting:observability.rules.custom_threshold/logs/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/logs/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/logs/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", ], "minimal_read": Array [ "login:", @@ -15150,150 +4332,6 @@ export default function ({ getService }: FtrProviderContext) { "saved_object:cloud/open_point_in_time", "saved_object:cloud/close_point_in_time", "ui:fleetv2/read", - "api:infra", - "api:rac", - "app:infra", - "app:logs", - "app:kibana", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:management/insightsAndAlerting/triggersActions", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/kibana", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "ui:logs/show", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", ], "read": Array [ "login:", @@ -15398,150 +4436,6 @@ export default function ({ getService }: FtrProviderContext) { "ui:fleetv2/agents_read", "ui:fleetv2/agent_policies_read", "ui:fleetv2/settings_read", - "api:infra", - "api:rac", - "app:infra", - "app:logs", - "app:kibana", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:management/insightsAndAlerting/triggersActions", - "ui:navLinks/infra", - "ui:navLinks/logs", - "ui:navLinks/kibana", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-ui-source/bulk_get", - "saved_object:infrastructure-ui-source/get", - "saved_object:infrastructure-ui-source/find", - "saved_object:infrastructure-ui-source/open_point_in_time", - "saved_object:infrastructure-ui-source/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "ui:logs/show", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", ], "settings_all": Array [ "login:", @@ -15905,6 +4799,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", "alerting:metrics.alert.threshold/alerts/rule/fillGaps", + "alerting:metrics.alert.threshold/observability/rule/get", + "alerting:metrics.alert.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.threshold/observability/rule/find", + "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.threshold/observability/rule/findGaps", + "alerting:metrics.alert.threshold/observability/rule/create", + "alerting:metrics.alert.threshold/observability/rule/delete", + "alerting:metrics.alert.threshold/observability/rule/update", + "alerting:metrics.alert.threshold/observability/rule/updateApiKey", + "alerting:metrics.alert.threshold/observability/rule/enable", + "alerting:metrics.alert.threshold/observability/rule/disable", + "alerting:metrics.alert.threshold/observability/rule/muteAll", + "alerting:metrics.alert.threshold/observability/rule/unmuteAll", + "alerting:metrics.alert.threshold/observability/rule/muteAlert", + "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", + "alerting:metrics.alert.threshold/observability/rule/snooze", + "alerting:metrics.alert.threshold/observability/rule/bulkEdit", + "alerting:metrics.alert.threshold/observability/rule/bulkDelete", + "alerting:metrics.alert.threshold/observability/rule/bulkEnable", + "alerting:metrics.alert.threshold/observability/rule/bulkDisable", + "alerting:metrics.alert.threshold/observability/rule/unsnooze", + "alerting:metrics.alert.threshold/observability/rule/runSoon", + "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", + "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", + "alerting:metrics.alert.threshold/observability/rule/fillGaps", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/get", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/bulkGet", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/getRuleState", @@ -15967,6 +4892,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", + "alerting:metrics.alert.inventory.threshold/observability/rule/get", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/find", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", + "alerting:metrics.alert.inventory.threshold/observability/rule/create", + "alerting:metrics.alert.inventory.threshold/observability/rule/delete", + "alerting:metrics.alert.inventory.threshold/observability/rule/update", + "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", + "alerting:metrics.alert.inventory.threshold/observability/rule/enable", + "alerting:metrics.alert.inventory.threshold/observability/rule/disable", + "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", + "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", + "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", + "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", + "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", + "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", + "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", + "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", "alerting:.es-query/infrastructure/rule/get", "alerting:.es-query/infrastructure/rule/bulkGet", "alerting:.es-query/infrastructure/rule/getRuleState", @@ -16029,6 +4985,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:.es-query/alerts/rule/scheduleBackfill", "alerting:.es-query/alerts/rule/deleteBackfill", "alerting:.es-query/alerts/rule/fillGaps", + "alerting:.es-query/observability/rule/get", + "alerting:.es-query/observability/rule/bulkGet", + "alerting:.es-query/observability/rule/getRuleState", + "alerting:.es-query/observability/rule/getAlertSummary", + "alerting:.es-query/observability/rule/getExecutionLog", + "alerting:.es-query/observability/rule/getActionErrorLog", + "alerting:.es-query/observability/rule/find", + "alerting:.es-query/observability/rule/getRuleExecutionKPI", + "alerting:.es-query/observability/rule/getBackfill", + "alerting:.es-query/observability/rule/findBackfill", + "alerting:.es-query/observability/rule/findGaps", + "alerting:.es-query/observability/rule/create", + "alerting:.es-query/observability/rule/delete", + "alerting:.es-query/observability/rule/update", + "alerting:.es-query/observability/rule/updateApiKey", + "alerting:.es-query/observability/rule/enable", + "alerting:.es-query/observability/rule/disable", + "alerting:.es-query/observability/rule/muteAll", + "alerting:.es-query/observability/rule/unmuteAll", + "alerting:.es-query/observability/rule/muteAlert", + "alerting:.es-query/observability/rule/unmuteAlert", + "alerting:.es-query/observability/rule/snooze", + "alerting:.es-query/observability/rule/bulkEdit", + "alerting:.es-query/observability/rule/bulkDelete", + "alerting:.es-query/observability/rule/bulkEnable", + "alerting:.es-query/observability/rule/bulkDisable", + "alerting:.es-query/observability/rule/unsnooze", + "alerting:.es-query/observability/rule/runSoon", + "alerting:.es-query/observability/rule/scheduleBackfill", + "alerting:.es-query/observability/rule/deleteBackfill", + "alerting:.es-query/observability/rule/fillGaps", "alerting:observability.rules.custom_threshold/infrastructure/rule/get", "alerting:observability.rules.custom_threshold/infrastructure/rule/bulkGet", "alerting:observability.rules.custom_threshold/infrastructure/rule/getRuleState", @@ -16091,6 +5078,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", + "alerting:observability.rules.custom_threshold/observability/rule/get", + "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", + "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", + "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", + "alerting:observability.rules.custom_threshold/observability/rule/find", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", + "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findGaps", + "alerting:observability.rules.custom_threshold/observability/rule/create", + "alerting:observability.rules.custom_threshold/observability/rule/delete", + "alerting:observability.rules.custom_threshold/observability/rule/update", + "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", + "alerting:observability.rules.custom_threshold/observability/rule/enable", + "alerting:observability.rules.custom_threshold/observability/rule/disable", + "alerting:observability.rules.custom_threshold/observability/rule/muteAll", + "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", + "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", + "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", + "alerting:observability.rules.custom_threshold/observability/rule/snooze", + "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", + "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", + "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", + "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", + "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", + "alerting:observability.rules.custom_threshold/observability/rule/runSoon", + "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/get", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/getRuleState", @@ -16153,1099 +5171,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/infrastructure/alert/get", - "alerting:metrics.alert.threshold/infrastructure/alert/find", - "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.threshold/infrastructure/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:.es-query/infrastructure/alert/get", - "alerting:.es-query/infrastructure/alert/find", - "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/infrastructure/alert/getAlertSummary", - "alerting:.es-query/infrastructure/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:observability.rules.custom_threshold/infrastructure/alert/get", - "alerting:observability.rules.custom_threshold/infrastructure/alert/find", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/infrastructure/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/create", - "saved_object:infrastructure-monitoring-log-view/bulk_create", - "saved_object:infrastructure-monitoring-log-view/update", - "saved_object:infrastructure-monitoring-log-view/bulk_update", - "saved_object:infrastructure-monitoring-log-view/delete", - "saved_object:infrastructure-monitoring-log-view/bulk_delete", - "saved_object:infrastructure-monitoring-log-view/share_to_space", - "ui:logs/show", - "ui:logs/configureSource", - "ui:logs/save", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/rule/create", - "alerting:logs.alert.document.count/logs/rule/delete", - "alerting:logs.alert.document.count/logs/rule/update", - "alerting:logs.alert.document.count/logs/rule/updateApiKey", - "alerting:logs.alert.document.count/logs/rule/enable", - "alerting:logs.alert.document.count/logs/rule/disable", - "alerting:logs.alert.document.count/logs/rule/muteAll", - "alerting:logs.alert.document.count/logs/rule/unmuteAll", - "alerting:logs.alert.document.count/logs/rule/muteAlert", - "alerting:logs.alert.document.count/logs/rule/unmuteAlert", - "alerting:logs.alert.document.count/logs/rule/snooze", - "alerting:logs.alert.document.count/logs/rule/bulkEdit", - "alerting:logs.alert.document.count/logs/rule/bulkDelete", - "alerting:logs.alert.document.count/logs/rule/bulkEnable", - "alerting:logs.alert.document.count/logs/rule/bulkDisable", - "alerting:logs.alert.document.count/logs/rule/unsnooze", - "alerting:logs.alert.document.count/logs/rule/runSoon", - "alerting:logs.alert.document.count/logs/rule/scheduleBackfill", - "alerting:logs.alert.document.count/logs/rule/deleteBackfill", - "alerting:logs.alert.document.count/logs/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/logs/rule/create", - "alerting:.es-query/logs/rule/delete", - "alerting:.es-query/logs/rule/update", - "alerting:.es-query/logs/rule/updateApiKey", - "alerting:.es-query/logs/rule/enable", - "alerting:.es-query/logs/rule/disable", - "alerting:.es-query/logs/rule/muteAll", - "alerting:.es-query/logs/rule/unmuteAll", - "alerting:.es-query/logs/rule/muteAlert", - "alerting:.es-query/logs/rule/unmuteAlert", - "alerting:.es-query/logs/rule/snooze", - "alerting:.es-query/logs/rule/bulkEdit", - "alerting:.es-query/logs/rule/bulkDelete", - "alerting:.es-query/logs/rule/bulkEnable", - "alerting:.es-query/logs/rule/bulkDisable", - "alerting:.es-query/logs/rule/unsnooze", - "alerting:.es-query/logs/rule/runSoon", - "alerting:.es-query/logs/rule/scheduleBackfill", - "alerting:.es-query/logs/rule/deleteBackfill", - "alerting:.es-query/logs/rule/fillGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/create", - "alerting:observability.rules.custom_threshold/logs/rule/delete", - "alerting:observability.rules.custom_threshold/logs/rule/update", - "alerting:observability.rules.custom_threshold/logs/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/logs/rule/enable", - "alerting:observability.rules.custom_threshold/logs/rule/disable", - "alerting:observability.rules.custom_threshold/logs/rule/muteAll", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/logs/rule/muteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/snooze", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/logs/rule/unsnooze", - "alerting:observability.rules.custom_threshold/logs/rule/runSoon", - "alerting:observability.rules.custom_threshold/logs/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/fillGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/logs/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/logs/alert/update", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/update", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", @@ -17277,141 +5202,76 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", + "alerting:metrics.alert.threshold/infrastructure/alert/get", + "alerting:metrics.alert.threshold/infrastructure/alert/find", + "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.threshold/infrastructure/alert/update", + "alerting:metrics.alert.threshold/alerts/alert/get", + "alerting:metrics.alert.threshold/alerts/alert/find", + "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", + "alerting:metrics.alert.threshold/alerts/alert/update", "alerting:metrics.alert.threshold/observability/alert/get", "alerting:metrics.alert.threshold/observability/alert/find", "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", "alerting:metrics.alert.threshold/observability/alert/update", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/update", + "alerting:metrics.alert.inventory.threshold/alerts/alert/get", + "alerting:metrics.alert.inventory.threshold/alerts/alert/find", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/alerts/alert/update", "alerting:metrics.alert.inventory.threshold/observability/alert/get", "alerting:metrics.alert.inventory.threshold/observability/alert/find", "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", + "alerting:.es-query/infrastructure/alert/get", + "alerting:.es-query/infrastructure/alert/find", + "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/infrastructure/alert/getAlertSummary", + "alerting:.es-query/infrastructure/alert/update", + "alerting:.es-query/alerts/alert/get", + "alerting:.es-query/alerts/alert/find", + "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/alerts/alert/getAlertSummary", + "alerting:.es-query/alerts/alert/update", "alerting:.es-query/observability/alert/get", "alerting:.es-query/observability/alert/find", "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", "alerting:.es-query/observability/alert/getAlertSummary", "alerting:.es-query/observability/alert/update", + "alerting:observability.rules.custom_threshold/infrastructure/alert/get", + "alerting:observability.rules.custom_threshold/infrastructure/alert/find", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/infrastructure/alert/update", + "alerting:observability.rules.custom_threshold/alerts/alert/get", + "alerting:observability.rules.custom_threshold/alerts/alert/find", + "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/alerts/alert/update", + "alerting:observability.rules.custom_threshold/observability/alert/get", + "alerting:observability.rules.custom_threshold/observability/alert/find", + "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/alert/update", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/update", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", @@ -17562,6 +5422,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", "alerting:metrics.alert.threshold/alerts/rule/fillGaps", + "alerting:metrics.alert.threshold/observability/rule/get", + "alerting:metrics.alert.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.threshold/observability/rule/find", + "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.threshold/observability/rule/findGaps", + "alerting:metrics.alert.threshold/observability/rule/create", + "alerting:metrics.alert.threshold/observability/rule/delete", + "alerting:metrics.alert.threshold/observability/rule/update", + "alerting:metrics.alert.threshold/observability/rule/updateApiKey", + "alerting:metrics.alert.threshold/observability/rule/enable", + "alerting:metrics.alert.threshold/observability/rule/disable", + "alerting:metrics.alert.threshold/observability/rule/muteAll", + "alerting:metrics.alert.threshold/observability/rule/unmuteAll", + "alerting:metrics.alert.threshold/observability/rule/muteAlert", + "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", + "alerting:metrics.alert.threshold/observability/rule/snooze", + "alerting:metrics.alert.threshold/observability/rule/bulkEdit", + "alerting:metrics.alert.threshold/observability/rule/bulkDelete", + "alerting:metrics.alert.threshold/observability/rule/bulkEnable", + "alerting:metrics.alert.threshold/observability/rule/bulkDisable", + "alerting:metrics.alert.threshold/observability/rule/unsnooze", + "alerting:metrics.alert.threshold/observability/rule/runSoon", + "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", + "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", + "alerting:metrics.alert.threshold/observability/rule/fillGaps", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/get", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/bulkGet", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/getRuleState", @@ -17624,6 +5515,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", + "alerting:metrics.alert.inventory.threshold/observability/rule/get", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/find", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", + "alerting:metrics.alert.inventory.threshold/observability/rule/create", + "alerting:metrics.alert.inventory.threshold/observability/rule/delete", + "alerting:metrics.alert.inventory.threshold/observability/rule/update", + "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", + "alerting:metrics.alert.inventory.threshold/observability/rule/enable", + "alerting:metrics.alert.inventory.threshold/observability/rule/disable", + "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", + "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", + "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", + "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", + "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", + "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", + "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", + "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", "alerting:.es-query/infrastructure/rule/get", "alerting:.es-query/infrastructure/rule/bulkGet", "alerting:.es-query/infrastructure/rule/getRuleState", @@ -17686,6 +5608,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:.es-query/alerts/rule/scheduleBackfill", "alerting:.es-query/alerts/rule/deleteBackfill", "alerting:.es-query/alerts/rule/fillGaps", + "alerting:.es-query/observability/rule/get", + "alerting:.es-query/observability/rule/bulkGet", + "alerting:.es-query/observability/rule/getRuleState", + "alerting:.es-query/observability/rule/getAlertSummary", + "alerting:.es-query/observability/rule/getExecutionLog", + "alerting:.es-query/observability/rule/getActionErrorLog", + "alerting:.es-query/observability/rule/find", + "alerting:.es-query/observability/rule/getRuleExecutionKPI", + "alerting:.es-query/observability/rule/getBackfill", + "alerting:.es-query/observability/rule/findBackfill", + "alerting:.es-query/observability/rule/findGaps", + "alerting:.es-query/observability/rule/create", + "alerting:.es-query/observability/rule/delete", + "alerting:.es-query/observability/rule/update", + "alerting:.es-query/observability/rule/updateApiKey", + "alerting:.es-query/observability/rule/enable", + "alerting:.es-query/observability/rule/disable", + "alerting:.es-query/observability/rule/muteAll", + "alerting:.es-query/observability/rule/unmuteAll", + "alerting:.es-query/observability/rule/muteAlert", + "alerting:.es-query/observability/rule/unmuteAlert", + "alerting:.es-query/observability/rule/snooze", + "alerting:.es-query/observability/rule/bulkEdit", + "alerting:.es-query/observability/rule/bulkDelete", + "alerting:.es-query/observability/rule/bulkEnable", + "alerting:.es-query/observability/rule/bulkDisable", + "alerting:.es-query/observability/rule/unsnooze", + "alerting:.es-query/observability/rule/runSoon", + "alerting:.es-query/observability/rule/scheduleBackfill", + "alerting:.es-query/observability/rule/deleteBackfill", + "alerting:.es-query/observability/rule/fillGaps", "alerting:observability.rules.custom_threshold/infrastructure/rule/get", "alerting:observability.rules.custom_threshold/infrastructure/rule/bulkGet", "alerting:observability.rules.custom_threshold/infrastructure/rule/getRuleState", @@ -17748,6 +5701,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", + "alerting:observability.rules.custom_threshold/observability/rule/get", + "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", + "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", + "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", + "alerting:observability.rules.custom_threshold/observability/rule/find", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", + "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findGaps", + "alerting:observability.rules.custom_threshold/observability/rule/create", + "alerting:observability.rules.custom_threshold/observability/rule/delete", + "alerting:observability.rules.custom_threshold/observability/rule/update", + "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", + "alerting:observability.rules.custom_threshold/observability/rule/enable", + "alerting:observability.rules.custom_threshold/observability/rule/disable", + "alerting:observability.rules.custom_threshold/observability/rule/muteAll", + "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", + "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", + "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", + "alerting:observability.rules.custom_threshold/observability/rule/snooze", + "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", + "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", + "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", + "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", + "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", + "alerting:observability.rules.custom_threshold/observability/rule/runSoon", + "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/get", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/getRuleState", @@ -17810,1099 +5794,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/infrastructure/alert/get", - "alerting:metrics.alert.threshold/infrastructure/alert/find", - "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.threshold/infrastructure/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:.es-query/infrastructure/alert/get", - "alerting:.es-query/infrastructure/alert/find", - "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/infrastructure/alert/getAlertSummary", - "alerting:.es-query/infrastructure/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:observability.rules.custom_threshold/infrastructure/alert/get", - "alerting:observability.rules.custom_threshold/infrastructure/alert/find", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/infrastructure/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "saved_object:infrastructure-monitoring-log-view/create", - "saved_object:infrastructure-monitoring-log-view/bulk_create", - "saved_object:infrastructure-monitoring-log-view/update", - "saved_object:infrastructure-monitoring-log-view/bulk_update", - "saved_object:infrastructure-monitoring-log-view/delete", - "saved_object:infrastructure-monitoring-log-view/bulk_delete", - "saved_object:infrastructure-monitoring-log-view/share_to_space", - "ui:logs/show", - "ui:logs/configureSource", - "ui:logs/save", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/rule/create", - "alerting:logs.alert.document.count/logs/rule/delete", - "alerting:logs.alert.document.count/logs/rule/update", - "alerting:logs.alert.document.count/logs/rule/updateApiKey", - "alerting:logs.alert.document.count/logs/rule/enable", - "alerting:logs.alert.document.count/logs/rule/disable", - "alerting:logs.alert.document.count/logs/rule/muteAll", - "alerting:logs.alert.document.count/logs/rule/unmuteAll", - "alerting:logs.alert.document.count/logs/rule/muteAlert", - "alerting:logs.alert.document.count/logs/rule/unmuteAlert", - "alerting:logs.alert.document.count/logs/rule/snooze", - "alerting:logs.alert.document.count/logs/rule/bulkEdit", - "alerting:logs.alert.document.count/logs/rule/bulkDelete", - "alerting:logs.alert.document.count/logs/rule/bulkEnable", - "alerting:logs.alert.document.count/logs/rule/bulkDisable", - "alerting:logs.alert.document.count/logs/rule/unsnooze", - "alerting:logs.alert.document.count/logs/rule/runSoon", - "alerting:logs.alert.document.count/logs/rule/scheduleBackfill", - "alerting:logs.alert.document.count/logs/rule/deleteBackfill", - "alerting:logs.alert.document.count/logs/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:.es-query/logs/rule/create", - "alerting:.es-query/logs/rule/delete", - "alerting:.es-query/logs/rule/update", - "alerting:.es-query/logs/rule/updateApiKey", - "alerting:.es-query/logs/rule/enable", - "alerting:.es-query/logs/rule/disable", - "alerting:.es-query/logs/rule/muteAll", - "alerting:.es-query/logs/rule/unmuteAll", - "alerting:.es-query/logs/rule/muteAlert", - "alerting:.es-query/logs/rule/unmuteAlert", - "alerting:.es-query/logs/rule/snooze", - "alerting:.es-query/logs/rule/bulkEdit", - "alerting:.es-query/logs/rule/bulkDelete", - "alerting:.es-query/logs/rule/bulkEnable", - "alerting:.es-query/logs/rule/bulkDisable", - "alerting:.es-query/logs/rule/unsnooze", - "alerting:.es-query/logs/rule/runSoon", - "alerting:.es-query/logs/rule/scheduleBackfill", - "alerting:.es-query/logs/rule/deleteBackfill", - "alerting:.es-query/logs/rule/fillGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/create", - "alerting:observability.rules.custom_threshold/logs/rule/delete", - "alerting:observability.rules.custom_threshold/logs/rule/update", - "alerting:observability.rules.custom_threshold/logs/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/logs/rule/enable", - "alerting:observability.rules.custom_threshold/logs/rule/disable", - "alerting:observability.rules.custom_threshold/logs/rule/muteAll", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/logs/rule/muteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/logs/rule/snooze", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/logs/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/logs/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/logs/rule/unsnooze", - "alerting:observability.rules.custom_threshold/logs/rule/runSoon", - "alerting:observability.rules.custom_threshold/logs/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/fillGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/logs/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:.es-query/logs/alert/update", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/update", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", @@ -18934,141 +5825,76 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", + "alerting:metrics.alert.threshold/infrastructure/alert/get", + "alerting:metrics.alert.threshold/infrastructure/alert/find", + "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.threshold/infrastructure/alert/update", + "alerting:metrics.alert.threshold/alerts/alert/get", + "alerting:metrics.alert.threshold/alerts/alert/find", + "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", + "alerting:metrics.alert.threshold/alerts/alert/update", "alerting:metrics.alert.threshold/observability/alert/get", "alerting:metrics.alert.threshold/observability/alert/find", "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", "alerting:metrics.alert.threshold/observability/alert/update", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/update", + "alerting:metrics.alert.inventory.threshold/alerts/alert/get", + "alerting:metrics.alert.inventory.threshold/alerts/alert/find", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/alerts/alert/update", "alerting:metrics.alert.inventory.threshold/observability/alert/get", "alerting:metrics.alert.inventory.threshold/observability/alert/find", "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", + "alerting:.es-query/infrastructure/alert/get", + "alerting:.es-query/infrastructure/alert/find", + "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/infrastructure/alert/getAlertSummary", + "alerting:.es-query/infrastructure/alert/update", + "alerting:.es-query/alerts/alert/get", + "alerting:.es-query/alerts/alert/find", + "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/alerts/alert/getAlertSummary", + "alerting:.es-query/alerts/alert/update", "alerting:.es-query/observability/alert/get", "alerting:.es-query/observability/alert/find", "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", "alerting:.es-query/observability/alert/getAlertSummary", "alerting:.es-query/observability/alert/update", + "alerting:observability.rules.custom_threshold/infrastructure/alert/get", + "alerting:observability.rules.custom_threshold/infrastructure/alert/find", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/infrastructure/alert/update", + "alerting:observability.rules.custom_threshold/alerts/alert/get", + "alerting:observability.rules.custom_threshold/alerts/alert/find", + "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/alerts/alert/update", + "alerting:observability.rules.custom_threshold/observability/alert/get", + "alerting:observability.rules.custom_threshold/observability/alert/find", + "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/alert/update", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/update", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", @@ -19156,6 +5982,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.threshold/alerts/rule/getBackfill", "alerting:metrics.alert.threshold/alerts/rule/findBackfill", "alerting:metrics.alert.threshold/alerts/rule/findGaps", + "alerting:metrics.alert.threshold/observability/rule/get", + "alerting:metrics.alert.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.threshold/observability/rule/find", + "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.threshold/observability/rule/findGaps", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/get", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/bulkGet", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/getRuleState", @@ -19178,6 +6015,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", + "alerting:metrics.alert.inventory.threshold/observability/rule/get", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/find", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", "alerting:.es-query/infrastructure/rule/get", "alerting:.es-query/infrastructure/rule/bulkGet", "alerting:.es-query/infrastructure/rule/getRuleState", @@ -19200,6 +6048,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:.es-query/alerts/rule/getBackfill", "alerting:.es-query/alerts/rule/findBackfill", "alerting:.es-query/alerts/rule/findGaps", + "alerting:.es-query/observability/rule/get", + "alerting:.es-query/observability/rule/bulkGet", + "alerting:.es-query/observability/rule/getRuleState", + "alerting:.es-query/observability/rule/getAlertSummary", + "alerting:.es-query/observability/rule/getExecutionLog", + "alerting:.es-query/observability/rule/getActionErrorLog", + "alerting:.es-query/observability/rule/find", + "alerting:.es-query/observability/rule/getRuleExecutionKPI", + "alerting:.es-query/observability/rule/getBackfill", + "alerting:.es-query/observability/rule/findBackfill", + "alerting:.es-query/observability/rule/findGaps", "alerting:observability.rules.custom_threshold/infrastructure/rule/get", "alerting:observability.rules.custom_threshold/infrastructure/rule/bulkGet", "alerting:observability.rules.custom_threshold/infrastructure/rule/getRuleState", @@ -19222,6 +6081,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", + "alerting:observability.rules.custom_threshold/observability/rule/get", + "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", + "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", + "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", + "alerting:observability.rules.custom_threshold/observability/rule/find", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", + "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findGaps", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/get", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/getRuleState", @@ -19244,434 +6114,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/infrastructure/alert/get", - "alerting:metrics.alert.threshold/infrastructure/alert/find", - "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/infrastructure/alert/get", - "alerting:.es-query/infrastructure/alert/find", - "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/infrastructure/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/infrastructure/alert/get", - "alerting:observability.rules.custom_threshold/infrastructure/alert/find", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "ui:logs/show", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", @@ -19683,114 +6125,62 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", + "alerting:metrics.alert.threshold/infrastructure/alert/get", + "alerting:metrics.alert.threshold/infrastructure/alert/find", + "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.threshold/alerts/alert/get", + "alerting:metrics.alert.threshold/alerts/alert/find", + "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", "alerting:metrics.alert.threshold/observability/alert/get", "alerting:metrics.alert.threshold/observability/alert/find", "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/alerts/alert/get", + "alerting:metrics.alert.inventory.threshold/alerts/alert/find", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", "alerting:metrics.alert.inventory.threshold/observability/alert/get", "alerting:metrics.alert.inventory.threshold/observability/alert/find", "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", + "alerting:.es-query/infrastructure/alert/get", + "alerting:.es-query/infrastructure/alert/find", + "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/infrastructure/alert/getAlertSummary", + "alerting:.es-query/alerts/alert/get", + "alerting:.es-query/alerts/alert/find", + "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/alerts/alert/getAlertSummary", "alerting:.es-query/observability/alert/get", "alerting:.es-query/observability/alert/find", "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", "alerting:.es-query/observability/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/infrastructure/alert/get", + "alerting:observability.rules.custom_threshold/infrastructure/alert/find", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/alerts/alert/get", + "alerting:observability.rules.custom_threshold/alerts/alert/find", + "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/alert/get", + "alerting:observability.rules.custom_threshold/observability/alert/find", + "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", @@ -19877,6 +6267,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.threshold/alerts/rule/getBackfill", "alerting:metrics.alert.threshold/alerts/rule/findBackfill", "alerting:metrics.alert.threshold/alerts/rule/findGaps", + "alerting:metrics.alert.threshold/observability/rule/get", + "alerting:metrics.alert.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.threshold/observability/rule/find", + "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.threshold/observability/rule/findGaps", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/get", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/bulkGet", "alerting:metrics.alert.inventory.threshold/infrastructure/rule/getRuleState", @@ -19899,6 +6300,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", + "alerting:metrics.alert.inventory.threshold/observability/rule/get", + "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", + "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", + "alerting:metrics.alert.inventory.threshold/observability/rule/find", + "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", + "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", + "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", "alerting:.es-query/infrastructure/rule/get", "alerting:.es-query/infrastructure/rule/bulkGet", "alerting:.es-query/infrastructure/rule/getRuleState", @@ -19921,6 +6333,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:.es-query/alerts/rule/getBackfill", "alerting:.es-query/alerts/rule/findBackfill", "alerting:.es-query/alerts/rule/findGaps", + "alerting:.es-query/observability/rule/get", + "alerting:.es-query/observability/rule/bulkGet", + "alerting:.es-query/observability/rule/getRuleState", + "alerting:.es-query/observability/rule/getAlertSummary", + "alerting:.es-query/observability/rule/getExecutionLog", + "alerting:.es-query/observability/rule/getActionErrorLog", + "alerting:.es-query/observability/rule/find", + "alerting:.es-query/observability/rule/getRuleExecutionKPI", + "alerting:.es-query/observability/rule/getBackfill", + "alerting:.es-query/observability/rule/findBackfill", + "alerting:.es-query/observability/rule/findGaps", "alerting:observability.rules.custom_threshold/infrastructure/rule/get", "alerting:observability.rules.custom_threshold/infrastructure/rule/bulkGet", "alerting:observability.rules.custom_threshold/infrastructure/rule/getRuleState", @@ -19943,6 +6366,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", + "alerting:observability.rules.custom_threshold/observability/rule/get", + "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", + "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", + "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", + "alerting:observability.rules.custom_threshold/observability/rule/find", + "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", + "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", + "alerting:observability.rules.custom_threshold/observability/rule/findGaps", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/get", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/infrastructure/rule/getRuleState", @@ -19965,434 +6399,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/infrastructure/alert/get", - "alerting:metrics.alert.threshold/infrastructure/alert/find", - "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/infrastructure/alert/get", - "alerting:.es-query/infrastructure/alert/find", - "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/infrastructure/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/infrastructure/alert/get", - "alerting:observability.rules.custom_threshold/infrastructure/alert/find", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "app:logs", - "app:observability-logs-explorer", - "ui:catalogue/infralogging", - "ui:catalogue/logs", - "ui:navLinks/logs", - "ui:navLinks/observability-logs-explorer", - "saved_object:infrastructure-monitoring-log-view/bulk_get", - "saved_object:infrastructure-monitoring-log-view/get", - "saved_object:infrastructure-monitoring-log-view/find", - "saved_object:infrastructure-monitoring-log-view/open_point_in_time", - "saved_object:infrastructure-monitoring-log-view/close_point_in_time", - "ui:logs/show", - "alerting:logs.alert.document.count/logs/rule/get", - "alerting:logs.alert.document.count/logs/rule/bulkGet", - "alerting:logs.alert.document.count/logs/rule/getRuleState", - "alerting:logs.alert.document.count/logs/rule/getAlertSummary", - "alerting:logs.alert.document.count/logs/rule/getExecutionLog", - "alerting:logs.alert.document.count/logs/rule/getActionErrorLog", - "alerting:logs.alert.document.count/logs/rule/find", - "alerting:logs.alert.document.count/logs/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/logs/rule/getBackfill", - "alerting:logs.alert.document.count/logs/rule/findBackfill", - "alerting:logs.alert.document.count/logs/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:.es-query/logs/rule/get", - "alerting:.es-query/logs/rule/bulkGet", - "alerting:.es-query/logs/rule/getRuleState", - "alerting:.es-query/logs/rule/getAlertSummary", - "alerting:.es-query/logs/rule/getExecutionLog", - "alerting:.es-query/logs/rule/getActionErrorLog", - "alerting:.es-query/logs/rule/find", - "alerting:.es-query/logs/rule/getRuleExecutionKPI", - "alerting:.es-query/logs/rule/getBackfill", - "alerting:.es-query/logs/rule/findBackfill", - "alerting:.es-query/logs/rule/findGaps", - "alerting:observability.rules.custom_threshold/logs/rule/get", - "alerting:observability.rules.custom_threshold/logs/rule/bulkGet", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleState", - "alerting:observability.rules.custom_threshold/logs/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/logs/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/logs/rule/find", - "alerting:observability.rules.custom_threshold/logs/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/logs/rule/getBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findBackfill", - "alerting:observability.rules.custom_threshold/logs/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/logs/rule/findGaps", - "alerting:logs.alert.document.count/logs/alert/get", - "alerting:logs.alert.document.count/logs/alert/find", - "alerting:logs.alert.document.count/logs/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/logs/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:.es-query/logs/alert/get", - "alerting:.es-query/logs/alert/find", - "alerting:.es-query/logs/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/logs/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/logs/alert/get", - "alerting:observability.rules.custom_threshold/logs/alert/find", - "alerting:observability.rules.custom_threshold/logs/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/logs/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/logs/alert/getAlertSummary", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", @@ -20404,114 +6410,62 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", + "alerting:metrics.alert.threshold/infrastructure/alert/get", + "alerting:metrics.alert.threshold/infrastructure/alert/find", + "alerting:metrics.alert.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.threshold/alerts/alert/get", + "alerting:metrics.alert.threshold/alerts/alert/find", + "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", "alerting:metrics.alert.threshold/observability/alert/get", "alerting:metrics.alert.threshold/observability/alert/find", "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/get", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/find", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/infrastructure/alert/getAlertSummary", + "alerting:metrics.alert.inventory.threshold/alerts/alert/get", + "alerting:metrics.alert.inventory.threshold/alerts/alert/find", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", "alerting:metrics.alert.inventory.threshold/observability/alert/get", "alerting:metrics.alert.inventory.threshold/observability/alert/find", "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", + "alerting:.es-query/infrastructure/alert/get", + "alerting:.es-query/infrastructure/alert/find", + "alerting:.es-query/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/infrastructure/alert/getAlertSummary", + "alerting:.es-query/alerts/alert/get", + "alerting:.es-query/alerts/alert/find", + "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", + "alerting:.es-query/alerts/alert/getAlertSummary", "alerting:.es-query/observability/alert/get", "alerting:.es-query/observability/alert/find", "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", "alerting:.es-query/observability/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/infrastructure/alert/get", + "alerting:observability.rules.custom_threshold/infrastructure/alert/find", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/infrastructure/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/alerts/alert/get", + "alerting:observability.rules.custom_threshold/alerts/alert/find", + "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", + "alerting:observability.rules.custom_threshold/observability/alert/get", + "alerting:observability.rules.custom_threshold/observability/alert/find", + "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", + "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/infrastructure/alert/getAlertSummary", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", @@ -20813,826 +6767,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/slo/alert/get", - "alerting:slo.rules.burnRate/slo/alert/find", - "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", - "alerting:slo.rules.burnRate/slo/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "app:observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", "alerting:slo.rules.burnRate/observability/rule/get", "alerting:slo.rules.burnRate/observability/rule/bulkGet", "alerting:slo.rules.burnRate/observability/rule/getRuleState", @@ -21664,357 +6798,21 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", + "alerting:slo.rules.burnRate/slo/alert/get", + "alerting:slo.rules.burnRate/slo/alert/find", + "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", + "alerting:slo.rules.burnRate/slo/alert/update", + "alerting:slo.rules.burnRate/alerts/alert/get", + "alerting:slo.rules.burnRate/alerts/alert/find", + "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", + "alerting:slo.rules.burnRate/alerts/alert/update", "alerting:slo.rules.burnRate/observability/alert/get", "alerting:slo.rules.burnRate/observability/alert/find", "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", ], "minimal_all": Array [ "login:", @@ -22152,826 +6950,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/slo/alert/get", - "alerting:slo.rules.burnRate/slo/alert/find", - "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", - "alerting:slo.rules.burnRate/slo/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "app:observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/create", - "alerting:xpack.synthetics.alerts.tls/observability/rule/delete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/update", - "alerting:xpack.synthetics.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/observability/rule/enable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/disable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/create", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/delete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/update", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/enable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/disable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/snooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/create", - "alerting:xpack.uptime.alerts.tls/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/update", - "alerting:xpack.uptime.alerts.tls/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", "alerting:slo.rules.burnRate/observability/rule/get", "alerting:slo.rules.burnRate/observability/rule/bulkGet", "alerting:slo.rules.burnRate/observability/rule/getRuleState", @@ -23003,357 +6981,21 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", + "alerting:slo.rules.burnRate/slo/alert/get", + "alerting:slo.rules.burnRate/slo/alert/find", + "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", + "alerting:slo.rules.burnRate/slo/alert/update", + "alerting:slo.rules.burnRate/alerts/alert/get", + "alerting:slo.rules.burnRate/alerts/alert/find", + "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", + "alerting:slo.rules.burnRate/alerts/alert/update", "alerting:slo.rules.burnRate/observability/alert/get", "alerting:slo.rules.burnRate/observability/alert/find", "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", ], "minimal_read": Array [ "login:", @@ -23428,303 +7070,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/alerts/rule/getBackfill", "alerting:slo.rules.burnRate/alerts/rule/findBackfill", "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/slo/alert/get", - "alerting:slo.rules.burnRate/slo/alert/find", - "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "app:observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", "alerting:slo.rules.burnRate/observability/rule/get", "alerting:slo.rules.burnRate/observability/rule/bulkGet", "alerting:slo.rules.burnRate/observability/rule/getRuleState", @@ -23736,204 +7081,18 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/observability/rule/getBackfill", "alerting:slo.rules.burnRate/observability/rule/findBackfill", "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", + "alerting:slo.rules.burnRate/slo/alert/get", + "alerting:slo.rules.burnRate/slo/alert/find", + "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", + "alerting:slo.rules.burnRate/alerts/alert/get", + "alerting:slo.rules.burnRate/alerts/alert/find", + "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", "alerting:slo.rules.burnRate/observability/alert/get", "alerting:slo.rules.burnRate/observability/alert/find", "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", ], "read": Array [ "login:", @@ -24008,303 +7167,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/alerts/rule/getBackfill", "alerting:slo.rules.burnRate/alerts/rule/findBackfill", "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/slo/alert/get", - "alerting:slo.rules.burnRate/slo/alert/find", - "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "app:observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/observability/rule/get", - "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/observability/rule/find", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/get", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/find", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/alerts/rule/get", - "alerting:xpack.uptime.alerts.tls/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/alerts/rule/find", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", "alerting:slo.rules.burnRate/observability/rule/get", "alerting:slo.rules.burnRate/observability/rule/bulkGet", "alerting:slo.rules.burnRate/observability/rule/getRuleState", @@ -24316,204 +7178,18 @@ export default function ({ getService }: FtrProviderContext) { "alerting:slo.rules.burnRate/observability/rule/getBackfill", "alerting:slo.rules.burnRate/observability/rule/findBackfill", "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/alert/get", - "alerting:xpack.uptime.alerts.tls/observability/alert/find", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", + "alerting:slo.rules.burnRate/slo/alert/get", + "alerting:slo.rules.burnRate/slo/alert/find", + "alerting:slo.rules.burnRate/slo/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/slo/alert/getAlertSummary", + "alerting:slo.rules.burnRate/alerts/alert/get", + "alerting:slo.rules.burnRate/alerts/alert/find", + "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", "alerting:slo.rules.burnRate/observability/alert/get", "alerting:slo.rules.burnRate/observability/alert/find", "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", ], }, "uptime": Object { @@ -24721,6 +7397,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.tls/observability/rule/get", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/find", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.tls/observability/rule/create", + "alerting:xpack.uptime.alerts.tls/observability/rule/delete", + "alerting:xpack.uptime.alerts.tls/observability/rule/update", + "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.tls/observability/rule/enable", + "alerting:xpack.uptime.alerts.tls/observability/rule/disable", + "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/get", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/getRuleState", @@ -24783,6 +7490,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/getRuleState", @@ -24845,6 +7583,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/get", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/getRuleState", @@ -24907,6 +7676,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/getRuleState", @@ -24969,6 +7769,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", "alerting:xpack.synthetics.alerts.tls/uptime/rule/get", "alerting:xpack.synthetics.alerts.tls/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/uptime/rule/getRuleState", @@ -25031,350 +7862,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/uptime/alert/get", - "alerting:xpack.uptime.alerts.tls/uptime/alert/find", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/uptime/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", "alerting:xpack.synthetics.alerts.tls/observability/rule/get", "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", @@ -25406,704 +7893,96 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", + "alerting:xpack.uptime.alerts.tls/uptime/alert/get", + "alerting:xpack.uptime.alerts.tls/uptime/alert/find", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/uptime/alert/update", + "alerting:xpack.uptime.alerts.tls/alerts/alert/get", + "alerting:xpack.uptime.alerts.tls/alerts/alert/find", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/alerts/alert/update", "alerting:xpack.uptime.alerts.tls/observability/alert/get", "alerting:xpack.uptime.alerts.tls/observability/alert/find", "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tls/observability/alert/update", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/update", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/update", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/update", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/update", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/update", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", + "alerting:xpack.synthetics.alerts.tls/observability/alert/get", + "alerting:xpack.synthetics.alerts.tls/observability/alert/find", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/observability/alert/update", ], "can_manage_private_locations": Array [ "login:", @@ -26325,6 +8204,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tls/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.tls/observability/rule/get", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/find", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.tls/observability/rule/create", + "alerting:xpack.uptime.alerts.tls/observability/rule/delete", + "alerting:xpack.uptime.alerts.tls/observability/rule/update", + "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.tls/observability/rule/enable", + "alerting:xpack.uptime.alerts.tls/observability/rule/disable", + "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/get", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/getRuleState", @@ -26387,6 +8297,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/getRuleState", @@ -26449,6 +8390,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/get", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/getRuleState", @@ -26511,6 +8483,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/scheduleBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/deleteBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/fillGaps", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/getRuleState", @@ -26573,6 +8576,37 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/scheduleBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/deleteBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/fillGaps", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", "alerting:xpack.synthetics.alerts.tls/uptime/rule/get", "alerting:xpack.synthetics.alerts.tls/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/uptime/rule/getRuleState", @@ -26635,350 +8669,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/alerts/rule/scheduleBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/deleteBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/uptime/alert/get", - "alerting:xpack.uptime.alerts.tls/uptime/alert/find", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/uptime/alert/update", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/update", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/update", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/update", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/update", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "ui:observability/write", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/observability/rule/create", - "alerting:apm.error_rate/observability/rule/delete", - "alerting:apm.error_rate/observability/rule/update", - "alerting:apm.error_rate/observability/rule/updateApiKey", - "alerting:apm.error_rate/observability/rule/enable", - "alerting:apm.error_rate/observability/rule/disable", - "alerting:apm.error_rate/observability/rule/muteAll", - "alerting:apm.error_rate/observability/rule/unmuteAll", - "alerting:apm.error_rate/observability/rule/muteAlert", - "alerting:apm.error_rate/observability/rule/unmuteAlert", - "alerting:apm.error_rate/observability/rule/snooze", - "alerting:apm.error_rate/observability/rule/bulkEdit", - "alerting:apm.error_rate/observability/rule/bulkDelete", - "alerting:apm.error_rate/observability/rule/bulkEnable", - "alerting:apm.error_rate/observability/rule/bulkDisable", - "alerting:apm.error_rate/observability/rule/unsnooze", - "alerting:apm.error_rate/observability/rule/runSoon", - "alerting:apm.error_rate/observability/rule/scheduleBackfill", - "alerting:apm.error_rate/observability/rule/deleteBackfill", - "alerting:apm.error_rate/observability/rule/fillGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/create", - "alerting:apm.error_rate/alerts/rule/delete", - "alerting:apm.error_rate/alerts/rule/update", - "alerting:apm.error_rate/alerts/rule/updateApiKey", - "alerting:apm.error_rate/alerts/rule/enable", - "alerting:apm.error_rate/alerts/rule/disable", - "alerting:apm.error_rate/alerts/rule/muteAll", - "alerting:apm.error_rate/alerts/rule/unmuteAll", - "alerting:apm.error_rate/alerts/rule/muteAlert", - "alerting:apm.error_rate/alerts/rule/unmuteAlert", - "alerting:apm.error_rate/alerts/rule/snooze", - "alerting:apm.error_rate/alerts/rule/bulkEdit", - "alerting:apm.error_rate/alerts/rule/bulkDelete", - "alerting:apm.error_rate/alerts/rule/bulkEnable", - "alerting:apm.error_rate/alerts/rule/bulkDisable", - "alerting:apm.error_rate/alerts/rule/unsnooze", - "alerting:apm.error_rate/alerts/rule/runSoon", - "alerting:apm.error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.error_rate/alerts/rule/deleteBackfill", - "alerting:apm.error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/create", - "alerting:apm.transaction_error_rate/observability/rule/delete", - "alerting:apm.transaction_error_rate/observability/rule/update", - "alerting:apm.transaction_error_rate/observability/rule/updateApiKey", - "alerting:apm.transaction_error_rate/observability/rule/enable", - "alerting:apm.transaction_error_rate/observability/rule/disable", - "alerting:apm.transaction_error_rate/observability/rule/muteAll", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAll", - "alerting:apm.transaction_error_rate/observability/rule/muteAlert", - "alerting:apm.transaction_error_rate/observability/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/observability/rule/snooze", - "alerting:apm.transaction_error_rate/observability/rule/bulkEdit", - "alerting:apm.transaction_error_rate/observability/rule/bulkDelete", - "alerting:apm.transaction_error_rate/observability/rule/bulkEnable", - "alerting:apm.transaction_error_rate/observability/rule/bulkDisable", - "alerting:apm.transaction_error_rate/observability/rule/unsnooze", - "alerting:apm.transaction_error_rate/observability/rule/runSoon", - "alerting:apm.transaction_error_rate/observability/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/observability/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/observability/rule/fillGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/create", - "alerting:apm.transaction_error_rate/alerts/rule/delete", - "alerting:apm.transaction_error_rate/alerts/rule/update", - "alerting:apm.transaction_error_rate/alerts/rule/updateApiKey", - "alerting:apm.transaction_error_rate/alerts/rule/enable", - "alerting:apm.transaction_error_rate/alerts/rule/disable", - "alerting:apm.transaction_error_rate/alerts/rule/muteAll", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAll", - "alerting:apm.transaction_error_rate/alerts/rule/muteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/unmuteAlert", - "alerting:apm.transaction_error_rate/alerts/rule/snooze", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEdit", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDelete", - "alerting:apm.transaction_error_rate/alerts/rule/bulkEnable", - "alerting:apm.transaction_error_rate/alerts/rule/bulkDisable", - "alerting:apm.transaction_error_rate/alerts/rule/unsnooze", - "alerting:apm.transaction_error_rate/alerts/rule/runSoon", - "alerting:apm.transaction_error_rate/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/deleteBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/fillGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/create", - "alerting:apm.transaction_duration/observability/rule/delete", - "alerting:apm.transaction_duration/observability/rule/update", - "alerting:apm.transaction_duration/observability/rule/updateApiKey", - "alerting:apm.transaction_duration/observability/rule/enable", - "alerting:apm.transaction_duration/observability/rule/disable", - "alerting:apm.transaction_duration/observability/rule/muteAll", - "alerting:apm.transaction_duration/observability/rule/unmuteAll", - "alerting:apm.transaction_duration/observability/rule/muteAlert", - "alerting:apm.transaction_duration/observability/rule/unmuteAlert", - "alerting:apm.transaction_duration/observability/rule/snooze", - "alerting:apm.transaction_duration/observability/rule/bulkEdit", - "alerting:apm.transaction_duration/observability/rule/bulkDelete", - "alerting:apm.transaction_duration/observability/rule/bulkEnable", - "alerting:apm.transaction_duration/observability/rule/bulkDisable", - "alerting:apm.transaction_duration/observability/rule/unsnooze", - "alerting:apm.transaction_duration/observability/rule/runSoon", - "alerting:apm.transaction_duration/observability/rule/scheduleBackfill", - "alerting:apm.transaction_duration/observability/rule/deleteBackfill", - "alerting:apm.transaction_duration/observability/rule/fillGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/create", - "alerting:apm.transaction_duration/alerts/rule/delete", - "alerting:apm.transaction_duration/alerts/rule/update", - "alerting:apm.transaction_duration/alerts/rule/updateApiKey", - "alerting:apm.transaction_duration/alerts/rule/enable", - "alerting:apm.transaction_duration/alerts/rule/disable", - "alerting:apm.transaction_duration/alerts/rule/muteAll", - "alerting:apm.transaction_duration/alerts/rule/unmuteAll", - "alerting:apm.transaction_duration/alerts/rule/muteAlert", - "alerting:apm.transaction_duration/alerts/rule/unmuteAlert", - "alerting:apm.transaction_duration/alerts/rule/snooze", - "alerting:apm.transaction_duration/alerts/rule/bulkEdit", - "alerting:apm.transaction_duration/alerts/rule/bulkDelete", - "alerting:apm.transaction_duration/alerts/rule/bulkEnable", - "alerting:apm.transaction_duration/alerts/rule/bulkDisable", - "alerting:apm.transaction_duration/alerts/rule/unsnooze", - "alerting:apm.transaction_duration/alerts/rule/runSoon", - "alerting:apm.transaction_duration/alerts/rule/scheduleBackfill", - "alerting:apm.transaction_duration/alerts/rule/deleteBackfill", - "alerting:apm.transaction_duration/alerts/rule/fillGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/observability/rule/create", - "alerting:apm.anomaly/observability/rule/delete", - "alerting:apm.anomaly/observability/rule/update", - "alerting:apm.anomaly/observability/rule/updateApiKey", - "alerting:apm.anomaly/observability/rule/enable", - "alerting:apm.anomaly/observability/rule/disable", - "alerting:apm.anomaly/observability/rule/muteAll", - "alerting:apm.anomaly/observability/rule/unmuteAll", - "alerting:apm.anomaly/observability/rule/muteAlert", - "alerting:apm.anomaly/observability/rule/unmuteAlert", - "alerting:apm.anomaly/observability/rule/snooze", - "alerting:apm.anomaly/observability/rule/bulkEdit", - "alerting:apm.anomaly/observability/rule/bulkDelete", - "alerting:apm.anomaly/observability/rule/bulkEnable", - "alerting:apm.anomaly/observability/rule/bulkDisable", - "alerting:apm.anomaly/observability/rule/unsnooze", - "alerting:apm.anomaly/observability/rule/runSoon", - "alerting:apm.anomaly/observability/rule/scheduleBackfill", - "alerting:apm.anomaly/observability/rule/deleteBackfill", - "alerting:apm.anomaly/observability/rule/fillGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/create", - "alerting:apm.anomaly/alerts/rule/delete", - "alerting:apm.anomaly/alerts/rule/update", - "alerting:apm.anomaly/alerts/rule/updateApiKey", - "alerting:apm.anomaly/alerts/rule/enable", - "alerting:apm.anomaly/alerts/rule/disable", - "alerting:apm.anomaly/alerts/rule/muteAll", - "alerting:apm.anomaly/alerts/rule/unmuteAll", - "alerting:apm.anomaly/alerts/rule/muteAlert", - "alerting:apm.anomaly/alerts/rule/unmuteAlert", - "alerting:apm.anomaly/alerts/rule/snooze", - "alerting:apm.anomaly/alerts/rule/bulkEdit", - "alerting:apm.anomaly/alerts/rule/bulkDelete", - "alerting:apm.anomaly/alerts/rule/bulkEnable", - "alerting:apm.anomaly/alerts/rule/bulkDisable", - "alerting:apm.anomaly/alerts/rule/unsnooze", - "alerting:apm.anomaly/alerts/rule/runSoon", - "alerting:apm.anomaly/alerts/rule/scheduleBackfill", - "alerting:apm.anomaly/alerts/rule/deleteBackfill", - "alerting:apm.anomaly/alerts/rule/fillGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/fillGaps", "alerting:xpack.synthetics.alerts.tls/observability/rule/get", "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", @@ -27010,704 +8700,96 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/observability/rule/scheduleBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/deleteBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/create", - "alerting:metrics.alert.threshold/observability/rule/delete", - "alerting:metrics.alert.threshold/observability/rule/update", - "alerting:metrics.alert.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.threshold/observability/rule/enable", - "alerting:metrics.alert.threshold/observability/rule/disable", - "alerting:metrics.alert.threshold/observability/rule/muteAll", - "alerting:metrics.alert.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.threshold/observability/rule/snooze", - "alerting:metrics.alert.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.threshold/observability/rule/runSoon", - "alerting:metrics.alert.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/create", - "alerting:metrics.alert.threshold/alerts/rule/delete", - "alerting:metrics.alert.threshold/alerts/rule/update", - "alerting:metrics.alert.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.threshold/alerts/rule/enable", - "alerting:metrics.alert.threshold/alerts/rule/disable", - "alerting:metrics.alert.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.threshold/alerts/rule/snooze", - "alerting:metrics.alert.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.threshold/alerts/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/create", - "alerting:metrics.alert.inventory.threshold/observability/rule/delete", - "alerting:metrics.alert.inventory.threshold/observability/rule/update", - "alerting:metrics.alert.inventory.threshold/observability/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/observability/rule/enable", - "alerting:metrics.alert.inventory.threshold/observability/rule/disable", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/observability/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/observability/rule/snooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/observability/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/observability/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/observability/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/fillGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/create", - "alerting:metrics.alert.inventory.threshold/alerts/rule/delete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/update", - "alerting:metrics.alert.inventory.threshold/alerts/rule/updateApiKey", - "alerting:metrics.alert.inventory.threshold/alerts/rule/enable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/disable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAll", - "alerting:metrics.alert.inventory.threshold/alerts/rule/muteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unmuteAlert", - "alerting:metrics.alert.inventory.threshold/alerts/rule/snooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEdit", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDelete", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkEnable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkDisable", - "alerting:metrics.alert.inventory.threshold/alerts/rule/unsnooze", - "alerting:metrics.alert.inventory.threshold/alerts/rule/runSoon", - "alerting:metrics.alert.inventory.threshold/alerts/rule/scheduleBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/deleteBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/fillGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/create", - "alerting:xpack.uptime.alerts.tls/observability/rule/delete", - "alerting:xpack.uptime.alerts.tls/observability/rule/update", - "alerting:xpack.uptime.alerts.tls/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tls/observability/rule/enable", - "alerting:xpack.uptime.alerts.tls/observability/rule/disable", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tls/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tls/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tls/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tls/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tls/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/create", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/delete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/update", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/enable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/disable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/snooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/create", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/delete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/update", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/enable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/disable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/snooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/fillGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/create", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/delete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/update", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/updateApiKey", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/enable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/disable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAll", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/muteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unmuteAlert", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/snooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEdit", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDelete", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkEnable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkDisable", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/unsnooze", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/runSoon", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/scheduleBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/deleteBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/fillGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/create", - "alerting:logs.alert.document.count/observability/rule/delete", - "alerting:logs.alert.document.count/observability/rule/update", - "alerting:logs.alert.document.count/observability/rule/updateApiKey", - "alerting:logs.alert.document.count/observability/rule/enable", - "alerting:logs.alert.document.count/observability/rule/disable", - "alerting:logs.alert.document.count/observability/rule/muteAll", - "alerting:logs.alert.document.count/observability/rule/unmuteAll", - "alerting:logs.alert.document.count/observability/rule/muteAlert", - "alerting:logs.alert.document.count/observability/rule/unmuteAlert", - "alerting:logs.alert.document.count/observability/rule/snooze", - "alerting:logs.alert.document.count/observability/rule/bulkEdit", - "alerting:logs.alert.document.count/observability/rule/bulkDelete", - "alerting:logs.alert.document.count/observability/rule/bulkEnable", - "alerting:logs.alert.document.count/observability/rule/bulkDisable", - "alerting:logs.alert.document.count/observability/rule/unsnooze", - "alerting:logs.alert.document.count/observability/rule/runSoon", - "alerting:logs.alert.document.count/observability/rule/scheduleBackfill", - "alerting:logs.alert.document.count/observability/rule/deleteBackfill", - "alerting:logs.alert.document.count/observability/rule/fillGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/create", - "alerting:logs.alert.document.count/alerts/rule/delete", - "alerting:logs.alert.document.count/alerts/rule/update", - "alerting:logs.alert.document.count/alerts/rule/updateApiKey", - "alerting:logs.alert.document.count/alerts/rule/enable", - "alerting:logs.alert.document.count/alerts/rule/disable", - "alerting:logs.alert.document.count/alerts/rule/muteAll", - "alerting:logs.alert.document.count/alerts/rule/unmuteAll", - "alerting:logs.alert.document.count/alerts/rule/muteAlert", - "alerting:logs.alert.document.count/alerts/rule/unmuteAlert", - "alerting:logs.alert.document.count/alerts/rule/snooze", - "alerting:logs.alert.document.count/alerts/rule/bulkEdit", - "alerting:logs.alert.document.count/alerts/rule/bulkDelete", - "alerting:logs.alert.document.count/alerts/rule/bulkEnable", - "alerting:logs.alert.document.count/alerts/rule/bulkDisable", - "alerting:logs.alert.document.count/alerts/rule/unsnooze", - "alerting:logs.alert.document.count/alerts/rule/runSoon", - "alerting:logs.alert.document.count/alerts/rule/scheduleBackfill", - "alerting:logs.alert.document.count/alerts/rule/deleteBackfill", - "alerting:logs.alert.document.count/alerts/rule/fillGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/create", - "alerting:slo.rules.burnRate/observability/rule/delete", - "alerting:slo.rules.burnRate/observability/rule/update", - "alerting:slo.rules.burnRate/observability/rule/updateApiKey", - "alerting:slo.rules.burnRate/observability/rule/enable", - "alerting:slo.rules.burnRate/observability/rule/disable", - "alerting:slo.rules.burnRate/observability/rule/muteAll", - "alerting:slo.rules.burnRate/observability/rule/unmuteAll", - "alerting:slo.rules.burnRate/observability/rule/muteAlert", - "alerting:slo.rules.burnRate/observability/rule/unmuteAlert", - "alerting:slo.rules.burnRate/observability/rule/snooze", - "alerting:slo.rules.burnRate/observability/rule/bulkEdit", - "alerting:slo.rules.burnRate/observability/rule/bulkDelete", - "alerting:slo.rules.burnRate/observability/rule/bulkEnable", - "alerting:slo.rules.burnRate/observability/rule/bulkDisable", - "alerting:slo.rules.burnRate/observability/rule/unsnooze", - "alerting:slo.rules.burnRate/observability/rule/runSoon", - "alerting:slo.rules.burnRate/observability/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/observability/rule/deleteBackfill", - "alerting:slo.rules.burnRate/observability/rule/fillGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/create", - "alerting:slo.rules.burnRate/alerts/rule/delete", - "alerting:slo.rules.burnRate/alerts/rule/update", - "alerting:slo.rules.burnRate/alerts/rule/updateApiKey", - "alerting:slo.rules.burnRate/alerts/rule/enable", - "alerting:slo.rules.burnRate/alerts/rule/disable", - "alerting:slo.rules.burnRate/alerts/rule/muteAll", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAll", - "alerting:slo.rules.burnRate/alerts/rule/muteAlert", - "alerting:slo.rules.burnRate/alerts/rule/unmuteAlert", - "alerting:slo.rules.burnRate/alerts/rule/snooze", - "alerting:slo.rules.burnRate/alerts/rule/bulkEdit", - "alerting:slo.rules.burnRate/alerts/rule/bulkDelete", - "alerting:slo.rules.burnRate/alerts/rule/bulkEnable", - "alerting:slo.rules.burnRate/alerts/rule/bulkDisable", - "alerting:slo.rules.burnRate/alerts/rule/unsnooze", - "alerting:slo.rules.burnRate/alerts/rule/runSoon", - "alerting:slo.rules.burnRate/alerts/rule/scheduleBackfill", - "alerting:slo.rules.burnRate/alerts/rule/deleteBackfill", - "alerting:slo.rules.burnRate/alerts/rule/fillGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/create", - "alerting:observability.rules.custom_threshold/observability/rule/delete", - "alerting:observability.rules.custom_threshold/observability/rule/update", - "alerting:observability.rules.custom_threshold/observability/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/observability/rule/enable", - "alerting:observability.rules.custom_threshold/observability/rule/disable", - "alerting:observability.rules.custom_threshold/observability/rule/muteAll", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/observability/rule/muteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/observability/rule/snooze", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/observability/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/observability/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/observability/rule/unsnooze", - "alerting:observability.rules.custom_threshold/observability/rule/runSoon", - "alerting:observability.rules.custom_threshold/observability/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/fillGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/create", - "alerting:observability.rules.custom_threshold/alerts/rule/delete", - "alerting:observability.rules.custom_threshold/alerts/rule/update", - "alerting:observability.rules.custom_threshold/alerts/rule/updateApiKey", - "alerting:observability.rules.custom_threshold/alerts/rule/enable", - "alerting:observability.rules.custom_threshold/alerts/rule/disable", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAll", - "alerting:observability.rules.custom_threshold/alerts/rule/muteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/unmuteAlert", - "alerting:observability.rules.custom_threshold/alerts/rule/snooze", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEdit", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDelete", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkEnable", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkDisable", - "alerting:observability.rules.custom_threshold/alerts/rule/unsnooze", - "alerting:observability.rules.custom_threshold/alerts/rule/runSoon", - "alerting:observability.rules.custom_threshold/alerts/rule/scheduleBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/deleteBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/fillGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/observability/rule/create", - "alerting:.es-query/observability/rule/delete", - "alerting:.es-query/observability/rule/update", - "alerting:.es-query/observability/rule/updateApiKey", - "alerting:.es-query/observability/rule/enable", - "alerting:.es-query/observability/rule/disable", - "alerting:.es-query/observability/rule/muteAll", - "alerting:.es-query/observability/rule/unmuteAll", - "alerting:.es-query/observability/rule/muteAlert", - "alerting:.es-query/observability/rule/unmuteAlert", - "alerting:.es-query/observability/rule/snooze", - "alerting:.es-query/observability/rule/bulkEdit", - "alerting:.es-query/observability/rule/bulkDelete", - "alerting:.es-query/observability/rule/bulkEnable", - "alerting:.es-query/observability/rule/bulkDisable", - "alerting:.es-query/observability/rule/unsnooze", - "alerting:.es-query/observability/rule/runSoon", - "alerting:.es-query/observability/rule/scheduleBackfill", - "alerting:.es-query/observability/rule/deleteBackfill", - "alerting:.es-query/observability/rule/fillGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:.es-query/alerts/rule/create", - "alerting:.es-query/alerts/rule/delete", - "alerting:.es-query/alerts/rule/update", - "alerting:.es-query/alerts/rule/updateApiKey", - "alerting:.es-query/alerts/rule/enable", - "alerting:.es-query/alerts/rule/disable", - "alerting:.es-query/alerts/rule/muteAll", - "alerting:.es-query/alerts/rule/unmuteAll", - "alerting:.es-query/alerts/rule/muteAlert", - "alerting:.es-query/alerts/rule/unmuteAlert", - "alerting:.es-query/alerts/rule/snooze", - "alerting:.es-query/alerts/rule/bulkEdit", - "alerting:.es-query/alerts/rule/bulkDelete", - "alerting:.es-query/alerts/rule/bulkEnable", - "alerting:.es-query/alerts/rule/bulkDisable", - "alerting:.es-query/alerts/rule/unsnooze", - "alerting:.es-query/alerts/rule/runSoon", - "alerting:.es-query/alerts/rule/scheduleBackfill", - "alerting:.es-query/alerts/rule/deleteBackfill", - "alerting:.es-query/alerts/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/fillGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/create", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/delete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/updateApiKey", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/enable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/disable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAll", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/muteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unmuteAlert", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/snooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEdit", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDelete", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkEnable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkDisable", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/unsnooze", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/runSoon", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/scheduleBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/deleteBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/fillGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/observability/alert/update", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/update", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/update", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/update", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/update", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/update", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/update", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/update", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/update", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/update", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/update", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/update", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/update", + "alerting:xpack.uptime.alerts.tls/uptime/alert/get", + "alerting:xpack.uptime.alerts.tls/uptime/alert/find", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/uptime/alert/update", + "alerting:xpack.uptime.alerts.tls/alerts/alert/get", + "alerting:xpack.uptime.alerts.tls/alerts/alert/find", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/alerts/alert/update", "alerting:xpack.uptime.alerts.tls/observability/alert/get", "alerting:xpack.uptime.alerts.tls/observability/alert/find", "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tls/observability/alert/update", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/update", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/update", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/update", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/update", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/update", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/update", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/update", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/update", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/update", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/update", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/update", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/update", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/update", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/update", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/update", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/observability/alert/update", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/update", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/update", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/update", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/update", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/update", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/update", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/update", + "alerting:xpack.synthetics.alerts.tls/observability/alert/get", + "alerting:xpack.synthetics.alerts.tls/observability/alert/find", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/observability/alert/update", ], "minimal_read": Array [ "login:", @@ -27811,6 +8893,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.tls/observability/rule/get", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/find", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/get", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/getRuleState", @@ -27833,6 +8926,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/getRuleState", @@ -27855,6 +8959,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/get", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/getRuleState", @@ -27877,6 +8992,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/getRuleState", @@ -27899,6 +9025,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", "alerting:xpack.synthetics.alerts.tls/uptime/rule/get", "alerting:xpack.synthetics.alerts.tls/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/uptime/rule/getRuleState", @@ -27921,157 +9058,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/uptime/alert/get", - "alerting:xpack.uptime.alerts.tls/uptime/alert/find", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", "alerting:xpack.synthetics.alerts.tls/observability/rule/get", "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", @@ -28083,316 +9069,78 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/uptime/alert/get", + "alerting:xpack.uptime.alerts.tls/uptime/alert/find", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/alerts/alert/get", + "alerting:xpack.uptime.alerts.tls/alerts/alert/find", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tls/observability/alert/get", "alerting:xpack.uptime.alerts.tls/observability/alert/find", "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/observability/alert/get", + "alerting:xpack.synthetics.alerts.tls/observability/alert/find", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", ], "read": Array [ "login:", @@ -28496,6 +9244,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tls/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.tls/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.tls/observability/rule/get", + "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tls/observability/rule/find", + "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/get", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.tlsCertificate/uptime/rule/getRuleState", @@ -28518,6 +9277,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.tlsCertificate/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.monitorStatus/uptime/rule/getRuleState", @@ -28540,6 +9310,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.monitorStatus/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/get", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/bulkGet", "alerting:xpack.uptime.alerts.durationAnomaly/uptime/rule/getRuleState", @@ -28562,6 +9343,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/getBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findBackfill", "alerting:xpack.uptime.alerts.durationAnomaly/alerts/rule/findGaps", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", + "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/get", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.monitorStatus/uptime/rule/getRuleState", @@ -28584,6 +9376,17 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/getBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findBackfill", "alerting:xpack.synthetics.alerts.monitorStatus/alerts/rule/findGaps", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", "alerting:xpack.synthetics.alerts.tls/uptime/rule/get", "alerting:xpack.synthetics.alerts.tls/uptime/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/uptime/rule/getRuleState", @@ -28606,157 +9409,6 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/alerts/rule/getBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/findBackfill", "alerting:xpack.synthetics.alerts.tls/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/uptime/alert/get", - "alerting:xpack.uptime.alerts.tls/uptime/alert/find", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/alerts/alert/get", - "alerting:xpack.uptime.alerts.tls/alerts/alert/find", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", - "app:observability", - "ui:catalogue/observability", - "ui:navLinks/observability", - "ui:observability/read", - "alerting:apm.error_rate/observability/rule/get", - "alerting:apm.error_rate/observability/rule/bulkGet", - "alerting:apm.error_rate/observability/rule/getRuleState", - "alerting:apm.error_rate/observability/rule/getAlertSummary", - "alerting:apm.error_rate/observability/rule/getExecutionLog", - "alerting:apm.error_rate/observability/rule/getActionErrorLog", - "alerting:apm.error_rate/observability/rule/find", - "alerting:apm.error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/observability/rule/getBackfill", - "alerting:apm.error_rate/observability/rule/findBackfill", - "alerting:apm.error_rate/observability/rule/findGaps", - "alerting:apm.error_rate/alerts/rule/get", - "alerting:apm.error_rate/alerts/rule/bulkGet", - "alerting:apm.error_rate/alerts/rule/getRuleState", - "alerting:apm.error_rate/alerts/rule/getAlertSummary", - "alerting:apm.error_rate/alerts/rule/getExecutionLog", - "alerting:apm.error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.error_rate/alerts/rule/find", - "alerting:apm.error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.error_rate/alerts/rule/getBackfill", - "alerting:apm.error_rate/alerts/rule/findBackfill", - "alerting:apm.error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_error_rate/observability/rule/get", - "alerting:apm.transaction_error_rate/observability/rule/bulkGet", - "alerting:apm.transaction_error_rate/observability/rule/getRuleState", - "alerting:apm.transaction_error_rate/observability/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/observability/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/observability/rule/find", - "alerting:apm.transaction_error_rate/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/observability/rule/getBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findBackfill", - "alerting:apm.transaction_error_rate/observability/rule/findGaps", - "alerting:apm.transaction_error_rate/alerts/rule/get", - "alerting:apm.transaction_error_rate/alerts/rule/bulkGet", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleState", - "alerting:apm.transaction_error_rate/alerts/rule/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/rule/getExecutionLog", - "alerting:apm.transaction_error_rate/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_error_rate/alerts/rule/find", - "alerting:apm.transaction_error_rate/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_error_rate/alerts/rule/getBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findBackfill", - "alerting:apm.transaction_error_rate/alerts/rule/findGaps", - "alerting:apm.transaction_duration/observability/rule/get", - "alerting:apm.transaction_duration/observability/rule/bulkGet", - "alerting:apm.transaction_duration/observability/rule/getRuleState", - "alerting:apm.transaction_duration/observability/rule/getAlertSummary", - "alerting:apm.transaction_duration/observability/rule/getExecutionLog", - "alerting:apm.transaction_duration/observability/rule/getActionErrorLog", - "alerting:apm.transaction_duration/observability/rule/find", - "alerting:apm.transaction_duration/observability/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/observability/rule/getBackfill", - "alerting:apm.transaction_duration/observability/rule/findBackfill", - "alerting:apm.transaction_duration/observability/rule/findGaps", - "alerting:apm.transaction_duration/alerts/rule/get", - "alerting:apm.transaction_duration/alerts/rule/bulkGet", - "alerting:apm.transaction_duration/alerts/rule/getRuleState", - "alerting:apm.transaction_duration/alerts/rule/getAlertSummary", - "alerting:apm.transaction_duration/alerts/rule/getExecutionLog", - "alerting:apm.transaction_duration/alerts/rule/getActionErrorLog", - "alerting:apm.transaction_duration/alerts/rule/find", - "alerting:apm.transaction_duration/alerts/rule/getRuleExecutionKPI", - "alerting:apm.transaction_duration/alerts/rule/getBackfill", - "alerting:apm.transaction_duration/alerts/rule/findBackfill", - "alerting:apm.transaction_duration/alerts/rule/findGaps", - "alerting:apm.anomaly/observability/rule/get", - "alerting:apm.anomaly/observability/rule/bulkGet", - "alerting:apm.anomaly/observability/rule/getRuleState", - "alerting:apm.anomaly/observability/rule/getAlertSummary", - "alerting:apm.anomaly/observability/rule/getExecutionLog", - "alerting:apm.anomaly/observability/rule/getActionErrorLog", - "alerting:apm.anomaly/observability/rule/find", - "alerting:apm.anomaly/observability/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/observability/rule/getBackfill", - "alerting:apm.anomaly/observability/rule/findBackfill", - "alerting:apm.anomaly/observability/rule/findGaps", - "alerting:apm.anomaly/alerts/rule/get", - "alerting:apm.anomaly/alerts/rule/bulkGet", - "alerting:apm.anomaly/alerts/rule/getRuleState", - "alerting:apm.anomaly/alerts/rule/getAlertSummary", - "alerting:apm.anomaly/alerts/rule/getExecutionLog", - "alerting:apm.anomaly/alerts/rule/getActionErrorLog", - "alerting:apm.anomaly/alerts/rule/find", - "alerting:apm.anomaly/alerts/rule/getRuleExecutionKPI", - "alerting:apm.anomaly/alerts/rule/getBackfill", - "alerting:apm.anomaly/alerts/rule/findBackfill", - "alerting:apm.anomaly/alerts/rule/findGaps", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/rule/findGaps", "alerting:xpack.synthetics.alerts.tls/observability/rule/get", "alerting:xpack.synthetics.alerts.tls/observability/rule/bulkGet", "alerting:xpack.synthetics.alerts.tls/observability/rule/getRuleState", @@ -28768,321 +9420,978 @@ export default function ({ getService }: FtrProviderContext) { "alerting:xpack.synthetics.alerts.tls/observability/rule/getBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/findBackfill", "alerting:xpack.synthetics.alerts.tls/observability/rule/findGaps", - "alerting:metrics.alert.threshold/observability/rule/get", - "alerting:metrics.alert.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/observability/rule/find", - "alerting:metrics.alert.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.threshold/observability/rule/findGaps", - "alerting:metrics.alert.threshold/alerts/rule/get", - "alerting:metrics.alert.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.threshold/alerts/rule/find", - "alerting:metrics.alert.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.threshold/alerts/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/observability/rule/get", - "alerting:metrics.alert.inventory.threshold/observability/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/observability/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/observability/rule/find", - "alerting:metrics.alert.inventory.threshold/observability/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/observability/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/observability/rule/findGaps", - "alerting:metrics.alert.inventory.threshold/alerts/rule/get", - "alerting:metrics.alert.inventory.threshold/alerts/rule/bulkGet", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleState", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getExecutionLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getActionErrorLog", - "alerting:metrics.alert.inventory.threshold/alerts/rule/find", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getRuleExecutionKPI", - "alerting:metrics.alert.inventory.threshold/alerts/rule/getBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findBackfill", - "alerting:metrics.alert.inventory.threshold/alerts/rule/findGaps", - "alerting:xpack.uptime.alerts.tls/observability/rule/get", - "alerting:xpack.uptime.alerts.tls/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tls/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tls/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tls/observability/rule/find", - "alerting:xpack.uptime.alerts.tls/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tls/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tls/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/get", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/find", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.tlsCertificate/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/get", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/find", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.monitorStatus/observability/rule/findGaps", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/get", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/bulkGet", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleState", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getAlertSummary", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getExecutionLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getActionErrorLog", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/find", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getRuleExecutionKPI", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/getBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findBackfill", - "alerting:xpack.uptime.alerts.durationAnomaly/observability/rule/findGaps", - "alerting:logs.alert.document.count/observability/rule/get", - "alerting:logs.alert.document.count/observability/rule/bulkGet", - "alerting:logs.alert.document.count/observability/rule/getRuleState", - "alerting:logs.alert.document.count/observability/rule/getAlertSummary", - "alerting:logs.alert.document.count/observability/rule/getExecutionLog", - "alerting:logs.alert.document.count/observability/rule/getActionErrorLog", - "alerting:logs.alert.document.count/observability/rule/find", - "alerting:logs.alert.document.count/observability/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/observability/rule/getBackfill", - "alerting:logs.alert.document.count/observability/rule/findBackfill", - "alerting:logs.alert.document.count/observability/rule/findGaps", - "alerting:logs.alert.document.count/alerts/rule/get", - "alerting:logs.alert.document.count/alerts/rule/bulkGet", - "alerting:logs.alert.document.count/alerts/rule/getRuleState", - "alerting:logs.alert.document.count/alerts/rule/getAlertSummary", - "alerting:logs.alert.document.count/alerts/rule/getExecutionLog", - "alerting:logs.alert.document.count/alerts/rule/getActionErrorLog", - "alerting:logs.alert.document.count/alerts/rule/find", - "alerting:logs.alert.document.count/alerts/rule/getRuleExecutionKPI", - "alerting:logs.alert.document.count/alerts/rule/getBackfill", - "alerting:logs.alert.document.count/alerts/rule/findBackfill", - "alerting:logs.alert.document.count/alerts/rule/findGaps", - "alerting:slo.rules.burnRate/observability/rule/get", - "alerting:slo.rules.burnRate/observability/rule/bulkGet", - "alerting:slo.rules.burnRate/observability/rule/getRuleState", - "alerting:slo.rules.burnRate/observability/rule/getAlertSummary", - "alerting:slo.rules.burnRate/observability/rule/getExecutionLog", - "alerting:slo.rules.burnRate/observability/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/observability/rule/find", - "alerting:slo.rules.burnRate/observability/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/observability/rule/getBackfill", - "alerting:slo.rules.burnRate/observability/rule/findBackfill", - "alerting:slo.rules.burnRate/observability/rule/findGaps", - "alerting:slo.rules.burnRate/alerts/rule/get", - "alerting:slo.rules.burnRate/alerts/rule/bulkGet", - "alerting:slo.rules.burnRate/alerts/rule/getRuleState", - "alerting:slo.rules.burnRate/alerts/rule/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/rule/getExecutionLog", - "alerting:slo.rules.burnRate/alerts/rule/getActionErrorLog", - "alerting:slo.rules.burnRate/alerts/rule/find", - "alerting:slo.rules.burnRate/alerts/rule/getRuleExecutionKPI", - "alerting:slo.rules.burnRate/alerts/rule/getBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findBackfill", - "alerting:slo.rules.burnRate/alerts/rule/findGaps", - "alerting:observability.rules.custom_threshold/observability/rule/get", - "alerting:observability.rules.custom_threshold/observability/rule/bulkGet", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleState", - "alerting:observability.rules.custom_threshold/observability/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/observability/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/observability/rule/find", - "alerting:observability.rules.custom_threshold/observability/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/observability/rule/getBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findBackfill", - "alerting:observability.rules.custom_threshold/observability/rule/findGaps", - "alerting:observability.rules.custom_threshold/alerts/rule/get", - "alerting:observability.rules.custom_threshold/alerts/rule/bulkGet", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleState", - "alerting:observability.rules.custom_threshold/alerts/rule/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/rule/getExecutionLog", - "alerting:observability.rules.custom_threshold/alerts/rule/getActionErrorLog", - "alerting:observability.rules.custom_threshold/alerts/rule/find", - "alerting:observability.rules.custom_threshold/alerts/rule/getRuleExecutionKPI", - "alerting:observability.rules.custom_threshold/alerts/rule/getBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findBackfill", - "alerting:observability.rules.custom_threshold/alerts/rule/findGaps", - "alerting:.es-query/observability/rule/get", - "alerting:.es-query/observability/rule/bulkGet", - "alerting:.es-query/observability/rule/getRuleState", - "alerting:.es-query/observability/rule/getAlertSummary", - "alerting:.es-query/observability/rule/getExecutionLog", - "alerting:.es-query/observability/rule/getActionErrorLog", - "alerting:.es-query/observability/rule/find", - "alerting:.es-query/observability/rule/getRuleExecutionKPI", - "alerting:.es-query/observability/rule/getBackfill", - "alerting:.es-query/observability/rule/findBackfill", - "alerting:.es-query/observability/rule/findGaps", - "alerting:.es-query/alerts/rule/get", - "alerting:.es-query/alerts/rule/bulkGet", - "alerting:.es-query/alerts/rule/getRuleState", - "alerting:.es-query/alerts/rule/getAlertSummary", - "alerting:.es-query/alerts/rule/getExecutionLog", - "alerting:.es-query/alerts/rule/getActionErrorLog", - "alerting:.es-query/alerts/rule/find", - "alerting:.es-query/alerts/rule/getRuleExecutionKPI", - "alerting:.es-query/alerts/rule/getBackfill", - "alerting:.es-query/alerts/rule/findBackfill", - "alerting:.es-query/alerts/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/observability/rule/findGaps", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/bulkGet", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleState", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getExecutionLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getActionErrorLog", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getRuleExecutionKPI", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/getBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findBackfill", - "alerting:xpack.ml.anomaly_detection_alert/alerts/rule/findGaps", - "alerting:apm.error_rate/observability/alert/get", - "alerting:apm.error_rate/observability/alert/find", - "alerting:apm.error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/observability/alert/getAlertSummary", - "alerting:apm.error_rate/alerts/alert/get", - "alerting:apm.error_rate/alerts/alert/find", - "alerting:apm.error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/observability/alert/get", - "alerting:apm.transaction_error_rate/observability/alert/find", - "alerting:apm.transaction_error_rate/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/observability/alert/getAlertSummary", - "alerting:apm.transaction_error_rate/alerts/alert/get", - "alerting:apm.transaction_error_rate/alerts/alert/find", - "alerting:apm.transaction_error_rate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_error_rate/alerts/alert/getAlertSummary", - "alerting:apm.transaction_duration/observability/alert/get", - "alerting:apm.transaction_duration/observability/alert/find", - "alerting:apm.transaction_duration/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/observability/alert/getAlertSummary", - "alerting:apm.transaction_duration/alerts/alert/get", - "alerting:apm.transaction_duration/alerts/alert/find", - "alerting:apm.transaction_duration/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.transaction_duration/alerts/alert/getAlertSummary", - "alerting:apm.anomaly/observability/alert/get", - "alerting:apm.anomaly/observability/alert/find", - "alerting:apm.anomaly/observability/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/observability/alert/getAlertSummary", - "alerting:apm.anomaly/alerts/alert/get", - "alerting:apm.anomaly/alerts/alert/find", - "alerting:apm.anomaly/alerts/alert/getAuthorizedAlertsIndices", - "alerting:apm.anomaly/alerts/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", - "alerting:xpack.synthetics.alerts.tls/observability/alert/get", - "alerting:xpack.synthetics.alerts.tls/observability/alert/find", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/observability/alert/get", - "alerting:metrics.alert.threshold/observability/alert/find", - "alerting:metrics.alert.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.threshold/alerts/alert/get", - "alerting:metrics.alert.threshold/alerts/alert/find", - "alerting:metrics.alert.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.threshold/alerts/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/observability/alert/get", - "alerting:metrics.alert.inventory.threshold/observability/alert/find", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/observability/alert/getAlertSummary", - "alerting:metrics.alert.inventory.threshold/alerts/alert/get", - "alerting:metrics.alert.inventory.threshold/alerts/alert/find", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:metrics.alert.inventory.threshold/alerts/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/uptime/alert/get", + "alerting:xpack.uptime.alerts.tls/uptime/alert/find", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tls/alerts/alert/get", + "alerting:xpack.uptime.alerts.tls/alerts/alert/find", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tls/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tls/observability/alert/get", "alerting:xpack.uptime.alerts.tls/observability/alert/find", "alerting:xpack.uptime.alerts.tls/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tls/observability/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/get", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/find", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.tlsCertificate/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/get", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/find", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.tlsCertificate/observability/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.monitorStatus/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/get", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/find", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.monitorStatus/observability/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/uptime/alert/getAlertSummary", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/get", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/find", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.uptime.alerts.durationAnomaly/alerts/alert/getAlertSummary", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/get", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/find", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAuthorizedAlertsIndices", "alerting:xpack.uptime.alerts.durationAnomaly/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/observability/alert/get", - "alerting:logs.alert.document.count/observability/alert/find", - "alerting:logs.alert.document.count/observability/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/observability/alert/getAlertSummary", - "alerting:logs.alert.document.count/alerts/alert/get", - "alerting:logs.alert.document.count/alerts/alert/find", - "alerting:logs.alert.document.count/alerts/alert/getAuthorizedAlertsIndices", - "alerting:logs.alert.document.count/alerts/alert/getAlertSummary", - "alerting:slo.rules.burnRate/observability/alert/get", - "alerting:slo.rules.burnRate/observability/alert/find", - "alerting:slo.rules.burnRate/observability/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/observability/alert/getAlertSummary", - "alerting:slo.rules.burnRate/alerts/alert/get", - "alerting:slo.rules.burnRate/alerts/alert/find", - "alerting:slo.rules.burnRate/alerts/alert/getAuthorizedAlertsIndices", - "alerting:slo.rules.burnRate/alerts/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/observability/alert/get", - "alerting:observability.rules.custom_threshold/observability/alert/find", - "alerting:observability.rules.custom_threshold/observability/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/observability/alert/getAlertSummary", - "alerting:observability.rules.custom_threshold/alerts/alert/get", - "alerting:observability.rules.custom_threshold/alerts/alert/find", - "alerting:observability.rules.custom_threshold/alerts/alert/getAuthorizedAlertsIndices", - "alerting:observability.rules.custom_threshold/alerts/alert/getAlertSummary", - "alerting:.es-query/observability/alert/get", - "alerting:.es-query/observability/alert/find", - "alerting:.es-query/observability/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/observability/alert/getAlertSummary", - "alerting:.es-query/alerts/alert/get", - "alerting:.es-query/alerts/alert/find", - "alerting:.es-query/alerts/alert/getAuthorizedAlertsIndices", - "alerting:.es-query/alerts/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/observability/alert/getAlertSummary", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/get", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/find", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAuthorizedAlertsIndices", - "alerting:xpack.ml.anomaly_detection_alert/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/get", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/find", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.monitorStatus/observability/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/get", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/find", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/uptime/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/get", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/find", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/alerts/alert/getAlertSummary", + "alerting:xpack.synthetics.alerts.tls/observability/alert/get", + "alerting:xpack.synthetics.alerts.tls/observability/alert/find", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAuthorizedAlertsIndices", + "alerting:xpack.synthetics.alerts.tls/observability/alert/getAlertSummary", ], }, } `); }); }); + + describe('Roles', function () { + // ToDo: This section should be removed once custom roles are live in serverless for OBLT projects + before(async function () { + supertestAdminWithCookieCredentials = await roleScopedSupertest.getSupertestWithRoleScope( + 'admin', + { + useCookieHeader: true, + } + ); + supertestAdminWithApiKey = await roleScopedSupertest.getSupertestWithRoleScope('admin', { + withCommonHeaders: true, + }); + }); + after(async function () { + await platformSecurityUtils.clearAllRoles(); + await supertestAdminWithApiKey.destroy(); + }); + + describe('Create Role', function () { + it('should allow us to create an empty role', async function () { + await supertestAdminWithApiKey.put('/api/security/role/empty_role').send({}).expect(204); + }); + + it('should create a role with kibana and elasticsearch privileges', async function () { + await supertestAdminWithApiKey + .put('/api/security/role/role_with_privileges') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + }, + kibana: [ + { + base: ['read'], + }, + { + feature: { + dashboard_v2: ['read'], + discover_v2: ['all'], + ml: ['all'], + }, + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(204); + + const role = await es.security.getRole({ name: 'role_with_privileges' }); + expect(role).toEqual({ + role_with_privileges: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + allow_restricted_indices: false, + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'kibana-.kibana', + privileges: [ + 'feature_dashboard_v2.read', + 'feature_discover_v2.all', + 'feature_ml.all', + ], + resources: ['space:marketing', 'space:sales'], + }, + ], + metadata: { + foo: 'test-metadata', + }, + run_as: [], + transient_metadata: { + enabled: true, + }, + }, + }); + }); + + it(`should create a role with kibana and FLS/DLS elasticsearch privileges`, async function () { + await supertestAdminWithApiKey + .put('/api/security/role/role_with_privileges_dls_fls') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + field_security: { + grant: ['*'], + except: ['geo.*'], + }, + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + query: `{ "match": { "geo.src": "CN" } }`, + }, + ], + }, + }) + .expect(204); + }); + + // serverless only (stateful will allow) + it(`should not create a role with 'run as' privileges`, async function () { + await supertestAdminWithApiKey + .put('/api/security/role/role_with_privileges') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + run_as: ['admin'], + }, + kibana: [ + { + base: ['read'], + }, + { + feature: { + dashboard_v2: ['read'], + discover_v2: ['all'], + ml: ['all'], + }, + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(400); + }); + + // serverless only (stateful will allow) + it(`should not create a role with remote cluster privileges`, async function () { + await supertestAdminWithApiKey + .put('/api/security/role/role_with_privileges') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + remote_cluster: [ + { + clusters: ['remote_cluster1'], + privileges: ['monitor_enrich'], + }, + ], + }, + kibana: [ + { + base: ['read'], + }, + { + feature: { + dashboard_v2: ['read'], + discover_v2: ['all'], + ml: ['all'], + }, + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(400); + }); + + // serverless only (stateful will allow) + it(`should not create a role with remote index privileges`, async function () { + await supertestAdminWithApiKey + .put('/api/security/role/role_with_privileges') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + remote_indices: [ + { + clusters: ['remote_cluster1'], + names: ['remote_index1', 'remote_index2'], + privileges: ['all'], + }, + ], + }, + kibana: [ + { + base: ['read'], + }, + { + feature: { + dashboard_v2: ['read'], + discover_v2: ['all'], + ml: ['all'], + }, + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(400); + }); + + describe('with the createOnly option enabled', function () { + it('should fail when role already exists', async function () { + await es.security.putRole({ + name: 'test_role', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + }); + + await supertestAdminWithApiKey + .put('/api/security/role/test_role?createOnly=true') + .send({}) + .expect(409); + }); + + it('should succeed when role does not exist', async function () { + await supertestAdminWithApiKey + .put('/api/security/role/new_role?createOnly=true') + .send({}) + .expect(204); + }); + }); + }); + + describe('Read Role', function () { + it('should get roles', async function () { + await es.security.putRole({ + name: 'role_to_get', + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'kibana-.kibana', + privileges: [ + 'feature_dashboard_v2.read', + 'feature_discover_v2.all', + 'feature_ml.all', + ], + resources: ['space:marketing', 'space:sales'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + foo: 'test-metadata', + }, + transient_metadata: { + enabled: true, + }, + }); + + await supertestAdminWithApiKey.get('/api/security/role/role_to_get').expect(200, { + name: 'role_to_get', + metadata: { + foo: 'test-metadata', + }, + transient_metadata: { enabled: true }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + allow_restricted_indices: false, + }, + ], + run_as: [], + }, + kibana: [ + { + base: ['read'], + feature: {}, + spaces: ['*'], + }, + { + base: [], + feature: { + dashboard_v2: ['read'], + discover_v2: ['all'], + ml: ['all'], + }, + spaces: ['marketing', 'sales'], + }, + ], + + _transform_error: [], + _unrecognized_applications: ['apm'], + }); + }); + + it('should get roles by space id', async function () { + await es.security.putRole({ + name: 'space_role_not_to_get', + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: [ + 'feature_dashboard_v2.read', + 'feature_discover_v2.all', + 'feature_ml.all', + ], + resources: ['space:marketing', 'space:sales'], + }, + ], + metadata: { + foo: 'test-metadata', + }, + transient_metadata: { + enabled: true, + }, + }); + + await es.security.putRole({ + name: 'space_role_to_get', + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: [ + 'feature_dashboard_v2.read', + 'feature_discover_v2.all', + 'feature_ml.all', + ], + resources: ['space:engineering', 'space:sales'], + }, + ], + metadata: { + foo: 'test-metadata', + }, + transient_metadata: { + enabled: true, + }, + }); + + await supertestAdminWithCookieCredentials + .get('/internal/security/roles/engineering') + .set(svlCommonApi.getInternalRequestHeader()) + .expect(200) + .expect((res: { body: Role[] }) => { + const roles = res.body; + + const success = roles.every((role) => { + return ( + role.name !== 'space_role_not_to_get' && + role.kibana.some((privilege) => { + return ( + privilege.spaces.includes('*') || privilege.spaces.includes('engineering') + ); + }) + ); + }); + + const expectedRole = roles.find((role) => role.name === 'space_role_to_get'); + + expect(success).toBe(true); + expect(expectedRole).toBeTruthy(); + }); + }); + }); + + describe('Update Role', function () { + it('should update a role with elasticsearch, kibana and other applications privileges', async function () { + await es.security.putRole({ + name: 'role_to_update', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + }); + + await supertestAdminWithApiKey + .put('/api/security/role/role_to_update') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + }, + kibana: [ + { + feature: { + dashboard_v2: ['read'], + dev_tools: ['all'], + }, + spaces: ['*'], + }, + { + base: ['all'], + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(204); + + const role = await es.security.getRole({ name: 'role_to_update' }); + expect(role).toEqual({ + role_to_update: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + allow_restricted_indices: false, + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['feature_dashboard_v2.read', 'feature_dev_tools.all'], + resources: ['*'], + }, + { + application: 'kibana-.kibana', + privileges: ['space_all'], + resources: ['space:marketing', 'space:sales'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + foo: 'test-metadata', + }, + run_as: [], + transient_metadata: { + enabled: true, + }, + }, + }); + }); + + it(`should update a role adding DLS and FLS privileges`, async function () { + await es.security.putRole({ + name: 'role_to_update_with_dls_fls', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + }); + + await supertestAdminWithApiKey + .put('/api/security/role/role_to_update_with_dls_fls') + .send({ + elasticsearch: { + cluster: ['manage'], + indices: [ + { + field_security: { + grant: ['*'], + except: ['geo.*'], + }, + names: ['logstash-*'], + privileges: ['read'], + query: `{ "match": { "geo.src": "CN" } }`, + }, + ], + }, + }) + .expect(204); + + const role = await es.security.getRole({ name: 'role_to_update_with_dls_fls' }); + + expect(role.role_to_update_with_dls_fls.cluster).toEqual(['manage']); + expect(role.role_to_update_with_dls_fls.indices[0].names).toEqual(['logstash-*']); + expect(role.role_to_update_with_dls_fls.indices[0].query).toEqual( + `{ "match": { "geo.src": "CN" } }` + ); + }); + + // serverless only (stateful will allow) + it(`should not update a role with 'run as' privileges`, async function () { + await es.security.putRole({ + name: 'role_to_update', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + }); + + await supertestAdminWithApiKey + .put('/api/security/role/role_to_update') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + run_as: ['admin'], + }, + kibana: [ + { + feature: { + dashboard_v2: ['read'], + dev_tools: ['all'], + }, + spaces: ['*'], + }, + { + base: ['all'], + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(400); + + const role = await es.security.getRole({ name: 'role_to_update' }); + expect(role).toEqual({ + role_to_update: { + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + allow_restricted_indices: false, + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + run_as: [], + transient_metadata: { + enabled: true, + }, + }, + }); + }); + + // serverless only (stateful will allow) + it(`should not update a role with remote cluster privileges`, async function () { + await es.security.putRole({ + name: 'role_to_update', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + }); + + await supertestAdminWithApiKey + .put('/api/security/role/role_to_update') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + remote_cluster: [ + { + clusters: ['remote_cluster1'], + privileges: ['monitor_enrich'], + }, + ], + }, + kibana: [ + { + feature: { + dashboard_v2: ['read'], + dev_tools: ['all'], + }, + spaces: ['*'], + }, + { + base: ['all'], + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(400); + + const role = await es.security.getRole({ name: 'role_to_update' }); + expect(role).toEqual({ + role_to_update: { + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + allow_restricted_indices: false, + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + run_as: [], + transient_metadata: { + enabled: true, + }, + }, + }); + }); + + // serverless only (stateful will allow) + it(`should not update a role with remote index privileges`, async function () { + await es.security.putRole({ + name: 'role_to_update', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + }); + + await supertestAdminWithApiKey + .put('/api/security/role/role_to_update') + .send({ + metadata: { + foo: 'test-metadata', + }, + elasticsearch: { + cluster: ['manage'], + indices: [ + { + names: ['logstash-*'], + privileges: ['read', 'view_index_metadata'], + }, + ], + remote_indices: [ + { + clusters: ['remote_cluster1'], + names: ['remote_index1', 'remote_index2'], + privileges: ['all'], + }, + ], + }, + kibana: [ + { + feature: { + dashboard_v2: ['read'], + dev_tools: ['all'], + }, + spaces: ['*'], + }, + { + base: ['all'], + spaces: ['marketing', 'sales'], + }, + ], + }) + .expect(400); + + const role = await es.security.getRole({ name: 'role_to_update' }); + expect(role).toEqual({ + role_to_update: { + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + allow_restricted_indices: false, + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + run_as: [], + transient_metadata: { + enabled: true, + }, + }, + }); + }); + }); + + describe('Delete Role', function () { + it('should delete an existing role', async function () { + await es.security.putRole({ + name: 'role_to_delete', + cluster: ['monitor'], + indices: [ + { + names: ['beats-*'], + privileges: ['write'], + }, + ], + applications: [ + { + application: 'kibana-.kibana', + privileges: ['read'], + resources: ['*'], + }, + { + application: 'apm', + privileges: ['apm-privilege'], + resources: ['*'], + }, + ], + metadata: { + bar: 'old-metadata', + }, + }); + await supertestAdminWithApiKey.delete('/api/security/role/role_to_delete').expect(204); + + const deletedRole = await es.security.getRole( + { name: 'role_to_delete' }, + { ignore: [404] } + ); + expect(deletedRole).toEqual({}); + }); + }); + }); }); } diff --git a/x-pack/test_serverless/functional/test_suites/observability/index.feature_flags.ts b/x-pack/test_serverless/functional/test_suites/observability/index.feature_flags.ts index c1fed8ce1cd8..29d6427e41ec 100644 --- a/x-pack/test_serverless/functional/test_suites/observability/index.feature_flags.ts +++ b/x-pack/test_serverless/functional/test_suites/observability/index.feature_flags.ts @@ -11,6 +11,8 @@ export default function ({ loadTestFile }: FtrProviderContext) { describe('serverless observability UI - feature flags', function () { // add tests that require feature flags, defined in config.feature_flags.ts loadTestFile(require.resolve('./role_management')); + loadTestFile(require.resolve('./rules/custom_threshold_consumer')); + loadTestFile(require.resolve('./rules/es_query_consumer')); loadTestFile(require.resolve('./infra')); loadTestFile(require.resolve('./streams')); }); diff --git a/x-pack/test_serverless/functional/test_suites/observability/index.ts b/x-pack/test_serverless/functional/test_suites/observability/index.ts index c16a8423a073..c9492218d21a 100644 --- a/x-pack/test_serverless/functional/test_suites/observability/index.ts +++ b/x-pack/test_serverless/functional/test_suites/observability/index.ts @@ -19,6 +19,9 @@ export default function ({ loadTestFile }: FtrProviderContext) { loadTestFile(require.resolve('./discover/embeddables')); loadTestFile(require.resolve('./onboarding')); loadTestFile(require.resolve('./rules/rules_list')); + // moved to feature flags config until custom roles in serverless are supported + // loadTestFile(require.resolve('./rules/custom_threshold_consumer')); + // loadTestFile(require.resolve('./rules/es_query_consumer')); loadTestFile(require.resolve('./cases')); loadTestFile(require.resolve('./advanced_settings')); loadTestFile(require.resolve('./ml')); diff --git a/x-pack/test_serverless/functional/test_suites/observability/rules/custom_threshold_consumer.ts b/x-pack/test_serverless/functional/test_suites/observability/rules/custom_threshold_consumer.ts new file mode 100644 index 000000000000..5bb8f298df9e --- /dev/null +++ b/x-pack/test_serverless/functional/test_suites/observability/rules/custom_threshold_consumer.ts @@ -0,0 +1,229 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ +import { v4 as uuidv4 } from 'uuid'; +import { expect } from 'expect'; +import { FtrProviderContext } from '../../../ftr_provider_context'; +import { RoleCredentials } from '../../../../shared/services'; + +export default ({ getPageObject, getService }: FtrProviderContext) => { + const svlCommonPage = getPageObject('svlCommonPage'); + const svlCommonNavigation = getPageObject('svlCommonNavigation'); + const testSubjects = getService('testSubjects'); + const supertest = getService('supertest'); + const retry = getService('retry'); + const svlUserManager = getService('svlUserManager'); + const alertingApi = getService('alertingApi'); + const dataViewApi = getService('dataViewApi'); + const kibanaServer = getService('kibanaServer'); + const samlAuth = getService('samlAuth'); + let roleAuthc: RoleCredentials; + + function createCustomThresholdRule({ ruleName }: { ruleName: string }) { + it('navigates to the rules page', async () => { + await svlCommonNavigation.sidenav.clickLink({ text: 'Alerts' }); + await testSubjects.click('manageRulesPageButton'); + }); + + it('should open the rule creation flyout', async () => { + await retry.try(async () => { + await testSubjects.click('createRuleButton'); + const isCreateRuleFlyoutVisible = await testSubjects.exists('ruleTypeModal'); + expect(isCreateRuleFlyoutVisible).toBe(true); + }); + }); + + it('should click the custom threshold rule type', async () => { + await testSubjects.click('observability.rules.custom_threshold-SelectOption'); + const ruleType = await testSubjects.getVisibleText('ruleDefinitionHeaderRuleTypeName'); + expect(ruleType).toEqual('Custom threshold'); + await testSubjects.exists('selectDataViewExpression'); + }); + + it('should create a new custom threshold rule', async () => { + const input = await testSubjects.find('ruleDetailsNameInput'); + await input.clearValueWithKeyboard(); + await testSubjects.setValue('ruleDetailsNameInput', ruleName); + await retry.try(async () => { + await testSubjects.click('rulePageFooterSaveButton'); + const doesConfirmModalExist = await testSubjects.exists('confirmModalConfirmButton'); + expect(doesConfirmModalExist).toBe(true); + await testSubjects.click('confirmModalConfirmButton'); + const name = await testSubjects.getVisibleText('ruleName'); + expect(name).toEqual(ruleName); + }); + }); + } + + describe('Custom threshold rule - consumers', function () { + // custom roles are not yet supported in MKI + this.tags(['skipMKI']); + const ruleIdList: string[] = []; + + before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); + // re-create the default data view in case it has been cleaned up by another test + await dataViewApi.create({ + id: 'default_all_data_id', + name: 'default:all-data', + title: '*,-.*', + }); + roleAuthc = await svlUserManager.createM2mApiKeyWithRoleScope('admin'); + }); + + afterEach(async () => { + await Promise.all( + ruleIdList.map(async (ruleId) => { + await supertest + .delete(`/api/alerting/rule/${ruleId}`) + .set('kbn-xsrf', 'foo') + .set('x-elastic-internal-origin', 'foo'); + }) + ); + }); + + after(async () => { + await svlUserManager.invalidateM2mApiKeyWithRoleScope(roleAuthc); + await kibanaServer.savedObjects.cleanStandardList(); + }); + + describe('both logs and infrastructure privileges', () => { + const uuid = ` ${uuidv4()}`; + const ruleName = `Custom threshold rule${uuid}`; + it('logs in with privileged role', async () => { + await svlCommonPage.loginWithPrivilegedRole(); + }); + + createCustomThresholdRule({ ruleName }); + + it('should have logs consumer by default', async () => { + const searchResults = (await alertingApi.searchRules( + roleAuthc, + `alert.attributes.name:"${ruleName}"` + )) as { body: { data: Array<{ consumer: string; id: string }> } }; + const rule = searchResults.body.data[0]; + expect(rule.consumer).toEqual('logs'); + ruleIdList.push(rule.id); + }); + }); + + describe('only logs privileges', () => { + const uuid = ` ${uuidv4()}`; + const ruleName = `Custom threshold rule${uuid}`; + it('logs in with logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + await svlCommonPage.loginWithCustomRole(); + }); + + createCustomThresholdRule({ ruleName }); + + it('should have logs consumer by default', async () => { + const searchResults = await alertingApi.searchRules( + roleAuthc, + `alert.attributes.name:"${ruleName}"` + ); + const rule = searchResults.body.data[0]; + expect(rule.consumer).toEqual('logs'); + ruleIdList.push(rule.id); + }); + }); + + describe('only infrastructure privileges', () => { + const uuid = ` ${uuidv4()}`; + const ruleName = `Custom threshold rule${uuid}`; + + it('logs in with infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + await svlCommonPage.loginWithCustomRole(); + }); + + createCustomThresholdRule({ ruleName }); + + it('should have infrastructure consumer by default', async () => { + const searchResults = await alertingApi.searchRules( + roleAuthc, + `alert.attributes.name:"${ruleName}"` + ); + const rule = searchResults.body.data[0]; + expect(rule.consumer).toEqual('infrastructure'); + ruleIdList.push(rule.id); + }); + }); + }); +}; + +export const ROLES = { + infra_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + infrastructure: ['all'], + indexPatterns: ['all'], + }, + }, + ], + }, + logs_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + logs: ['all'], + indexPatterns: ['all'], + }, + }, + ], + }, + synthetics_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + uptime: ['all'], + }, + }, + ], + }, +}; diff --git a/x-pack/test_serverless/functional/test_suites/observability/rules/es_query_consumer.ts b/x-pack/test_serverless/functional/test_suites/observability/rules/es_query_consumer.ts new file mode 100644 index 000000000000..37d4535b4f16 --- /dev/null +++ b/x-pack/test_serverless/functional/test_suites/observability/rules/es_query_consumer.ts @@ -0,0 +1,227 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License + * 2.0; you may not use this file except in compliance with the Elastic License + * 2.0. + */ +import { v4 as uuidv4 } from 'uuid'; +import { expect } from 'expect'; +import { FtrProviderContext } from '../../../ftr_provider_context'; +import { RoleCredentials } from '../../../../shared/services'; + +export default ({ getPageObject, getService }: FtrProviderContext) => { + const svlCommonPage = getPageObject('svlCommonPage'); + const svlCommonNavigation = getPageObject('svlCommonNavigation'); + const testSubjects = getService('testSubjects'); + const supertest = getService('supertest'); + const retry = getService('retry'); + const svlUserManager = getService('svlUserManager'); + const alertingApi = getService('alertingApi'); + const dataViewApi = getService('dataViewApi'); + const samlAuth = getService('samlAuth'); + const kibanaServer = getService('kibanaServer'); + let roleAuthc: RoleCredentials; + + function createESQueryRule({ ruleName }: { ruleName: string }) { + it('navigates to the rules page', async () => { + await svlCommonNavigation.sidenav.clickLink({ text: 'Alerts' }); + await testSubjects.click('manageRulesPageButton'); + }); + + it('should open the rule creation flyout', async () => { + await testSubjects.click('createRuleButton'); + const isCreateRuleFlyoutVisible = await testSubjects.exists('ruleTypeModal'); + expect(isCreateRuleFlyoutVisible).toBe(true); + }); + + it('should click the es query rule type', async () => { + await testSubjects.click('.es-query-SelectOption'); + const ruleType = await testSubjects.getVisibleText('ruleDefinitionHeaderRuleTypeName'); + expect(ruleType).toEqual('Elasticsearch query'); + }); + + it('should create a new es query rule', async () => { + await testSubjects.click('queryFormType_searchSource'); + await testSubjects.exists('selectDataViewExpression'); + const input = await testSubjects.find('ruleDetailsNameInput'); + await input.clearValueWithKeyboard(); + await testSubjects.setValue('ruleDetailsNameInput', ruleName); + await retry.try(async () => { + await testSubjects.click('rulePageFooterSaveButton'); + const doesConfirmModalExist = await testSubjects.exists('confirmModalConfirmButton'); + expect(doesConfirmModalExist).toBe(true); + }); + await testSubjects.click('confirmModalConfirmButton'); + const name = await testSubjects.getVisibleText('ruleName'); + expect(name).toEqual(ruleName); + }); + } + + describe('ES Query rule - consumers', function () { + // custom roles are not yet supported in MKI + this.tags(['skipMKI']); + const ruleIdList: string[] = []; + + before(async () => { + roleAuthc = await svlUserManager.createM2mApiKeyWithRoleScope('admin'); + await kibanaServer.savedObjects.cleanStandardList(); + // re-create the default data view in case it has been cleaned up by another test + await dataViewApi.create({ + id: 'default_all_data_id', + name: 'default:all-data', + title: '*,-.*', + }); + }); + + afterEach(async () => { + await Promise.all( + ruleIdList.map(async (ruleId) => { + await supertest + .delete(`/api/alerting/rule/${ruleId}`) + .set('kbn-xsrf', 'foo') + .set('x-elastic-internal-origin', 'foo'); + }) + ); + }); + + after(async () => { + await svlUserManager.invalidateM2mApiKeyWithRoleScope(roleAuthc); + }); + + describe('both logs and infrastructure privileges', () => { + const uuid = ` ${uuidv4()}`; + const ruleName = `ES Query rule${uuid}`; + it('logs in with privileged role', async () => { + await svlCommonPage.loginWithPrivilegedRole(); + }); + + createESQueryRule({ ruleName }); + + it('should have logs consumer by default', async () => { + const searchResults = await alertingApi.searchRules( + roleAuthc, + `alert.attributes.name:"${ruleName}"` + ); + const rule = searchResults.body.data[0]; + expect(rule.consumer).toEqual('logs'); + ruleIdList.push(rule.id); + }); + }); + + describe('only logs privileges', () => { + const uuid = ` ${uuidv4()}`; + const ruleName = `ES Query rule${uuid}`; + it('logs in with logs only role', async () => { + await samlAuth.setCustomRole(ROLES.logs_only); + + await svlCommonPage.loginWithCustomRole(); + }); + + createESQueryRule({ ruleName }); + + it('should have logs consumer by default', async () => { + const searchResults = await alertingApi.searchRules( + roleAuthc, + `alert.attributes.name:"${ruleName}"` + ); + const rule = searchResults.body.data[0]; + expect(rule.consumer).toEqual('logs'); + ruleIdList.push(rule.id); + }); + }); + + describe('only infrastructure privileges', () => { + const uuid = ` ${uuidv4()}`; + const ruleName = `ES Query rule${uuid}`; + + it('logs in with infra only role', async () => { + await samlAuth.setCustomRole(ROLES.infra_only); + + await svlCommonPage.loginWithCustomRole(); + }); + + createESQueryRule({ ruleName }); + + it('should have infrastructure consumer by default', async () => { + const searchResults = await alertingApi.searchRules( + roleAuthc, + `alert.attributes.name:"${ruleName}"` + ); + const rule = searchResults.body.data[0]; + expect(rule.consumer).toEqual('infrastructure'); + ruleIdList.push(rule.id); + }); + }); + }); +}; + +export const ROLES = { + infra_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + indexPatterns: ['all'], + infrastructure: ['all'], + }, + }, + ], + }, + logs_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + indexPatterns: ['all'], + logs: ['all'], + }, + }, + ], + }, + synthetics_only: { + elasticsearch: { + indices: [ + { + names: ['*'], + privileges: ['read'], + }, + ], + }, + kibana: [ + { + base: [], + spaces: ['*'], + feature: { + actions: ['all'], + maintenanceWindow: ['all'], + observabilityCasesV3: ['all'], + uptime: ['all'], + }, + }, + ], + }, +}; diff --git a/x-pack/test_serverless/functional/test_suites/observability/rules/rules_list.ts b/x-pack/test_serverless/functional/test_suites/observability/rules/rules_list.ts index 6a0d515afd23..e1a2aa7c58bd 100644 --- a/x-pack/test_serverless/functional/test_suites/observability/rules/rules_list.ts +++ b/x-pack/test_serverless/functional/test_suites/observability/rules/rules_list.ts @@ -23,6 +23,7 @@ export default ({ getPageObject, getService }: FtrProviderContext) => { const log = getService('log'); const svlUserManager = getService('svlUserManager'); const alertingApi = getService('alertingApi'); + const kibanaServer = getService('kibanaServer'); let roleAuthc: RoleCredentials; async function refreshRulesList() { @@ -74,6 +75,7 @@ export default ({ getPageObject, getService }: FtrProviderContext) => { }; before(async () => { + await kibanaServer.savedObjects.cleanStandardList(); roleAuthc = await svlUserManager.createM2mApiKeyWithRoleScope('admin'); await svlCommonPage.loginWithPrivilegedRole(); await svlObltNavigation.navigateToLandingPage(); @@ -90,6 +92,7 @@ export default ({ getPageObject, getService }: FtrProviderContext) => { .set('x-elastic-internal-origin', 'foo'); }) ); + await kibanaServer.savedObjects.cleanStandardList(); }); after(async () => { @@ -99,7 +102,7 @@ export default ({ getPageObject, getService }: FtrProviderContext) => { it('should create an ES Query Rule and display it when consumer is observability', async () => { const esQuery = await alertingApi.helpers.createEsQueryRule({ roleAuthc, - name: 'ES Query', + name: 'ES Query with observability consumer', consumer: 'observability', ruleTypeId: '.es-query', params: { @@ -118,13 +121,15 @@ export default ({ getPageObject, getService }: FtrProviderContext) => { await refreshRulesList(); const searchResults = await svlTriggersActionsUI.getRulesList(); expect(searchResults.length).toEqual(1); - expect(searchResults[0].name).toEqual('ES QueryElasticsearch query'); + expect(searchResults[0].name).toEqual( + 'ES Query with observability consumerElasticsearch query' + ); }); - it('should create an ES Query rule but not display it when consumer is stackAlerts', async () => { + it('should create an ES Query rule and NOT display it when consumer is stackAlerts', async () => { const esQuery = await alertingApi.helpers.createEsQueryRule({ roleAuthc, - name: 'ES Query', + name: 'ES Query with stackAlerts consumer', consumer: 'stackAlerts', ruleTypeId: '.es-query', params: { @@ -684,9 +689,7 @@ export default ({ getPageObject, getService }: FtrProviderContext) => { await testSubjects.click('ruleTypeFilterButton'); } - expect(await (await testSubjects.find('ruleType0Group')).getVisibleText()).toEqual( - 'Observability' - ); + expect(await (await testSubjects.find('ruleType0Group')).getVisibleText()).toEqual('Apm'); }); await testSubjects.click('ruleTypeapm.anomalyFilterOption');