github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-06-28 03:01:21 -04:00
Code Issues Projects Releases Packages Wiki Activity

[EDR Workflows] Change Osquery shards schema (#166178)

Browse source
This commit is contained in:
Tomasz Ciecierski 2023-09-12 17:26:16 +02:00 • committed by GitHub
parent 982b2c86bd
commit fb5f8e379b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
x-pack/plugins/osquery/common/api/packs/create_pack_route.ts
View file

@ -13,7 +13,7 @@ export const createPackRequestBodySchema = t.type({
description: t.union([t.string, t.undefined]), description: t.union([t.string, t.undefined]),
enabled: t.union([t.boolean, t.undefined]), enabled: t.union([t.boolean, t.undefined]),
policy_ids: t.union([t.array(t.string), t.undefined]), policy_ids: t.union([t.array(t.string), t.undefined]),
shards: t.record(t.string, toNumberRt), shards: t.union([t.record(t.string, toNumberRt), t.undefined]),
queries: t.record( queries: t.record(
t.string, t.string,
t.type({ t.type({

2
x-pack/plugins/osquery/server/routes/pack/create_pack_route.ts
View file

@ -67,7 +67,7 @@ export const createPackRoute = (router: IRouter, osqueryContext: OsqueryAppConte
const currentUser = await osqueryContext.security.authc.getCurrentUser(request)?.username; const currentUser = await osqueryContext.security.authc.getCurrentUser(request)?.username;
// eslint-disable-next-line @typescript-eslint/naming-convention // eslint-disable-next-line @typescript-eslint/naming-convention
const { name, description, queries, enabled, policy_ids, shards } = request.body; const { name, description, queries, enabled, policy_ids, shards = {} } = request.body;
const conflictingEntries = await savedObjectsClient.find({ const conflictingEntries = await savedObjectsClient.find({
type: packSavedObjectType, type: packSavedObjectType,
filter: `${packSavedObjectType}.attributes.name: "${name}"`, filter: `${packSavedObjectType}.attributes.name: "${name}"`,