jennypavlova
637499fd73
[Infrastructure UI] In Product Feedback - Kibana Feedback Link for Hosts page ( #145139 )
...
Closes #144451
## Summary
This PR adds "Technical Preview" badge and "Give Feedback" link to hosts
page. Additionally it adds also the link and tag to the advanced
settings
### Testing
Enable host view from `Stack Management` -> `Advanced Settings` (The
`[technical preview]` and the feedback link should be visible there):
<img width="1449" alt="image"
src="https://user-images.githubusercontent.com/14139027/201715747-9707ec5d-e5e9-4212-898e-08c3b9f1d243.png ">
Open Hosts page - the feedback link and technical preview badge should
be visible:
<img width="1570" alt="image"
src="https://user-images.githubusercontent.com/14139027/201716710-fc917f16-b888-441b-8421-0a1953b4c696.png ">
2022-11-14 20:50:27 +01:00
Chris Cowan
1cea0299ac
[Metrics UI] Use bucketSize from request options for overview query ( #145032 )
...
## Summary
This PR fixes #145030 by using the `options.bucketSize` in the
`date_histogram` for the Overview query.
2022-11-14 12:31:22 -07:00
jennypavlova
20e2fb5e1e
[Infrastructure UI] Add URL state to Hosts View ( #144181 )
...
Closes [#141492 ](https://github.com/elastic/kibana/issues/141492 )
## Summary
This PR adds `query`, `timeRange` and `filters` parameters to the URL
state on the hosts view. URL parameters are updated after search filters
are applied (after click on the "update" button.
## Testing
Different cases:
- Add new search criteria ( filter / time range / query ) and click on
"update" - the URL should update
- Save a query and reload
- Load a saved query
- Change an existing query
- Open the URL in a new browser tab/window - the filters should be added
Co-authored-by: Carlos Crespo <carloshenrique.leonelcrespo@elastic.co>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Nathan L Smith <nathan.smith@elastic.co>
2022-11-14 19:50:07 +01:00
Alejandro Fernández Gómez
bebcd354d3
[Uptime] Fix monitor alert label ( #145112 )
...
## Summary
Closes #143895
Updates the label for the status check labels to reflect what the alert
does.
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 11:42:24 -07:00
Shahzad
90f38a6388
[Synthetics] Update duration chart legend labels ( #145116 )
2022-11-15 03:29:03 +09:00
Tiago Costa
19c4e19813
skip flaky suite ( #145134 )
2022-11-14 17:40:57 +00:00
Jordan
34d8a68d10
[Cloud Posture] Dashboard Redesign trend graph ( #144814 )
2022-11-14 19:36:38 +02:00
jennypavlova
00b5e88ef3
[infrastructure UI] Metrics should use inventory metric formatter ( #145085 )
...
Closes #144637
## Summary
This PR fixes the formatting issue on the host view page. To keep it
consistent with the inventory page the formatters used there are
extended and used on the Host View.
I kept the 'N/A' fallback for missing values similar to the APM tables
as I think it looks better in the table ( the inventory formatter will
return an empty string in that case but it is also used for the tooltips
and there maybe it makes sense to leave it empty)
### Testing
Open the Host View and check the formatting of the values of the table:
<img width="2440" alt="image"
src="https://user-images.githubusercontent.com/14139027/201635976-ea2d5a65-b678-4484-a8f5-d6ee07278eb7.png ">
2022-11-14 18:33:29 +01:00
Tiago Costa
773f8deaeb
skip flaky suite ( #145136 )
2022-11-14 17:12:32 +00:00
Tiago Costa
e7730f0ab1
skip flaky suite ( #145135 )
2022-11-14 17:10:41 +00:00
Gerard Soldevila
261231f8c8
Replace default warning by an info message ( #145086 )
...
Customers upgrading to 8.6 should not have warning messages for a new
feature that they have not enabled.
This PR changes the default behaviour, logging an `info` message
(instead of a `warn`) when the default connector configuration is
missing for the `'notifications'` plugin.
2022-11-14 10:06:23 -07:00
Vitalii Dmyterko
f1117c8959
[Security Solution][Alerts] adds support for multi fields in new terms rule ( #143943 )
...
## Summary
- addresses https://github.com/elastic/kibana/issues/142862
- allows up to 3 fields in `New terms`
- displays new terms fields in alerts details
- For multiple new terms fields(['source.host', 'source.ip']), in terms aggregation uses a runtime field. Which is created by joining values from new terms fields into one single keyword. Field values encoded in base64 and joined with a configured delimiter symbol, which is not part of base64 symbols(a–Z, 0–9, +, /, =) to avoid a situation when delimiter can be part of field value. Include parameter consists of encoded in base64 results from Phase 1.
For single field, implementation remains the same to avoid performance penalties
- Performance measurements:
- [msearch POC for one field](https://github.com/elastic/kibana/pull/131010#issuecomment-1135280478 )
- [historical POC of multi fields](https://github.com/elastic/kibana/issues/142862#issuecomment-1290471400 )
- [current implementation](https://github.com/elastic/kibana/issues/142862#issuecomment-1298910940 )
## UI
### Alert details
#### Before
<img width="1128" alt="Screenshot 2022-10-26 at 18 29 00" src="https://user-images.githubusercontent.com/92328789/199074598-33483312-a660-49e2-aab6-9aea4f70a23e.png ">
#### After
<img width="1129" alt="Screenshot 2022-11-09 at 19 05 10" src="https://user-images.githubusercontent.com/92328789/201698130-b907a200-3cdd-49e6-ae76-a5e0ef9a9450.png ">
Delete any items that are not applicable to this PR.
- [ ] [Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html ) was added for features that require explanation or tutorials
- [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html ) were updated or added to match the most common scenarios
### For maintainers
- [ ] This was checked for breaking API changes and was [labeled appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process )
2022-11-14 09:55:20 -07:00
Abdul Wahab Zahid
164de3c5b4
[Synthetics UI] Fix filtering and search on management page ( #144838 )
...
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Fixes https://github.com/elastic/kibana/issues/144802
2022-11-14 17:38:38 +01:00
Nav
594e43e5ef
[Enterprise Search] Update crawler2 configurations to v2 ( #145096 )
...
## Summary
https://github.com/elastic/enterprise-search-team/issues/3208
The index `crawler2_configurations` was updated to v2 here:
https://github.com/elastic/ent-search/pull/7041
This PR ensures that Kibana uses the correct index version.
2022-11-14 17:38:29 +01:00
John Dorlus
045b57093c
CCS Tests for Machine Learning ( #144869 )
2022-11-14 11:31:27 -05:00
Kurt
90f6ffb353
Adding readonly view for API Keys page ( #144923 )
...
## Summary
Adding a `readonly` view for users with `read_security` cluster
privileges
## Release Note
The API Keys screen can be accessed in a Read Only view with the the
cluster privilege `read_security`
## Testing Steps
Login as `elastic` and create a `role` with the `read_security` cluster
privilege
<img width="877" alt="Screen Shot 2022-11-09 at 1 03 05 PM"
src="https://user-images.githubusercontent.com/21210601/200908865-b11ffe67-106e-45c4-a704-9120b5cc4a38.png ">
Create a test user and assign the newly create role, as well as `viewer`
and `kibana_admin`
<img width="860" alt="Screen Shot 2022-11-09 at 1 03 48 PM"
src="https://user-images.githubusercontent.com/21210601/200909077-710efb9d-4863-4a56-a3c1-65fc979d16b6.png ">
Login as the new test user and navigate to Stack Management > API Keys
Verify there aren't any Create buttons and that the ReadOnly `glasses`
icon is in the top right
<img width="1311" alt="Screen Shot 2022-11-09 at 1 04 59 PM"
src="https://user-images.githubusercontent.com/21210601/200909224-e291f3cf-39ee-4629-ab75-f355ced80db1.png ">
Login as `elastic` and create an API key, remember the name of the key
Go to Dev Tools and use the following script to grant usage of the API
key to the test user, use the following block:
```json
POST /_security/api_key/grant
{
"grant_type": "password",
"username" : "elastic",
"password" : "changeme",
"run_as": "test_user",
"api_key" : {
"name": "test-api-key"
}
}
```
Login as the test user and navigate to the API Keys page, notice the
granted API key is displayed, but you are unable to `delete` or `create`
new keys
<img width="1058" alt="Screen Shot 2022-11-09 at 1 06 48 PM"
src="https://user-images.githubusercontent.com/21210601/200909524-e0a3cc20-9626-4d39-8277-d77c3d795ee0.png ">
Co-authored-by: Thomas Watson <w@tson.dk>
2022-11-14 11:30:37 -05:00
Tomasz Ciecierski
00a7cf6cb8
[Osquery] Global packs ( #143948 )
2022-11-14 09:18:04 -07:00
Julia
2b2e1d19d2
[Ram] create bulk delete on rules front ( #144101 )
...
issue: https://github.com/elastic/kibana/issues/143826
## Summary
In this PR I am enabling `Delete` in menu when Select all is chosen. And
trigger new bulk delete API when `Delete` option will be chosen.
<img width="453" alt="Screenshot 2022-10-23 at 16 34 09"
src="https://user-images.githubusercontent.com/26089545/198290071-e7d6be54-286c-4a7c-a579-1d07ac23d3db.png ">
### Checklist
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common scenarios
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 17:08:37 +01:00
Paul Tavares
9fda59f512
[security solution][endpoint] Add new experimental feature flag for get-file and use it hide/display get-file response action ( #145042 )
...
## Summary
- Adds new experimental feature flag that controls the availability of
the `get-file` response action
- UI updated to remove `get-file` from the console if FF is `false`
- Server APIs updated to not register `get-file` related APIs if FF is
`false`
- Hides the "File Operation" kibana feature privilege
2022-11-14 08:41:52 -07:00
Janki Salvi
843eefa7a7
[Cases] truncate long case name by word break ( #145003 )
...
## Summary
This PR updates uses `break-word` to display text into the next line for
the long case name on the case management page.
Fixes: https://github.com/elastic/kibana/issues/142647
**Before**
**After**
### Checklist
- [x] This renders correctly on smaller devices using a responsive
layout. (You can test this [in your
browser](https://www.browserstack.com/guide/responsive-testing-on-local-server ))
- [x] This was checked for [cross-browser
compatibility](https://www.elastic.co/support/matrix#matrix_browsers )
2022-11-14 16:36:14 +01:00
Devin W. Hurley
e27be55bae
[Security Solution] [Exceptions] Adds a modal to confirm deletion of exception list ( #145034 )
2022-11-14 10:35:36 -05:00
Christos Nasikas
6c9cc6626b
[Cases] Fix selected label in the assignees filtering ( #145113 )
...
## Summary
With the introduction of the "No assignees" filtering in
https://github.com/elastic/kibana/pull/143390 we no longer have
assignees for filtering. Having the text say "1 assignee selected" when
selecting the "No assignees" filtering is misleading. This PR fixes this
issue with the label.
<img width="536" alt="Screenshot 2022-11-14 at 3 52 28 PM"
src="https://user-images.githubusercontent.com/7871006/201680341-e007931f-e9d2-4e5f-96d9-0909f4478bc8.png ">
<img width="536" alt="Screenshot 2022-11-14 at 3 52 20 PM"
src="https://user-images.githubusercontent.com/7871006/201680344-76b8bf04-8d0e-48ee-97ab-0d860f076f3f.png ">
<img width="551" alt="Screenshot 2022-11-14 at 3 51 48 PM"
src="https://user-images.githubusercontent.com/7871006/201680346-a3525a41-cef2-43a9-aa89-7d9238bb3944.png ">
### Checklist
Delete any items that are not applicable to this PR.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing ), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md )
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common scenarios
### For maintainers
- [x] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process )
2022-11-14 17:25:57 +02:00
Paul Tavares
6b6cdf8ab7
[Security Solution][Endpoint] Misc. updates in support of get-file response action ( #144948 )
...
## Summary
- Updates the `get-file` action response `outputs` to match latest from
endpoint
- Fix server size `doesFileHanveChunks()` and remove the `.keyword` from
the search field term (index mapping will be setup correctly for these
indexes)
- Updates the names of the File storage indexes
- Sets the `endpointRbacV1Enabled` FF to `true` (enables feature by
default)
- Uses Fleet exposed function utilities to retrieve the indexes for
File's metadata and data chunks
The following Fleet changes were also done
- Created common methods in fleet for retrieving the file metadata and
data indexes using an integration name (should protect us against index
names going forward and avoid having integrations in kibana keep
hard-coded values)
- Removed the .keyword from a few places in the file server service
(still need to test)
- Adjusted both the Fleet and the Security Solution code to use the new
methods for getting the integration specific index names (cc/
@juliaElastic )
2022-11-14 08:22:02 -07:00
Alison Goryachev
046543209e
[Guided onboarding] Address design feedback ( #144957 )
2022-11-14 10:21:41 -05:00
Jonathan Buttner
6ac78d740e
[ResponseOps][Actions] Don't show rule.tags for test mode ( #145001 )
...
This PR fixes a bug where the `rule.tags` were shown as an option in the
connector test mode. The test mode doesn't provide variables so it
shouldn't be shown.
### Rule Form
Still available when in the rule flow
### Test Mode
Not available in the test mode
2022-11-14 10:05:46 -05:00
Michael Katsoulis
2c996970fc
Set the correct enrollment token in case of multi page layout in k8s manifest ( #145098 )
...
## Summary
Setting the correct enrolment token to kubernetes manifest in case of
multi page layout steps when kubernetes has been selected as a platform.
### Checklist
Delete any items that are not applicable to this PR.
- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing ), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md )
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html )
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common scenarios
- [ ] Any UI touched in this PR is usable by keyboard only (learn more
about [keyboard accessibility](https://webaim.org/techniques/keyboard/ ))
- [ ] Any UI touched in this PR does not create any new axe failures
(run axe in browser:
[FF](https://addons.mozilla.org/en-US/firefox/addon/axe-devtools/ ),
[Chrome](https://chrome.google.com/webstore/detail/axe-web-accessibility-tes/lhdoppojpmngadmnindnejefpokejbdd?hl=en-US ))
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker )
- [ ] This renders correctly on smaller devices using a responsive
layout. (You can test this [in your
browser](https://www.browserstack.com/guide/responsive-testing-on-local-server ))
- [ ] This was checked for [cross-browser
compatibility](https://www.elastic.co/support/matrix#matrix_browsers )
Closes https://github.com/elastic/kibana/issues/145072
2022-11-14 16:56:29 +02:00
Yngrid Coello
9c27f3d798
[APM] Agent explorer (PoC) ( #143844 )
...
Closes [142218](https://github.com/elastic/kibana/issues/142218 )
- Introducing the Agent explorer view
https://user-images.githubusercontent.com/1313018/198403801-bd9aab9c-1f7e-4775-b3ed-e0e488eef513.mov
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 15:40:49 +01:00
Chenhui Wang
fa69b424bc
Update job index mapping ( #144777 )
...
## Summary
Part of https://github.com/elastic/enterprise-search-team/issues/3193
Part of https://github.com/elastic/enterprise-search-team/issues/3283
The changes in this PR:
1. adds metadata to `.elastic-connectors-sync-jobs` index mapping.
2. groups connector data under key `connector`
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 22:37:03 +08:00
Mike Côté
e5b27b36bd
Allow task manager health stats to be logged as info messages ( #144986 )
...
In this PR, I'm adding a new setting
(`xpack.task_manager.monitored_stats_health_verbose_log.level`) that
allows the task manager monitoring stats to be verbosely logged at info
level instead of warning.
The two supported values are:
- debug (default)
- info
This will help debug SDHs on Cloud where we won't want to turn on debug
level on the entire cluster but would still like to see the task manager
monitored stats over time.
## Cloud allow-list PR
https://github.com/elastic/cloud/pull/109563
## To verify
1. Set the following two configuration options:
```
xpack.task_manager.monitored_stats_health_verbose_log.enabled: true
xpack.task_manager.monitored_stats_health_verbose_log.level: info
```
2. Startup Kibana
3. Notice `Latest Monitored Stats:` are logged at info level
4. Remove `xpack.task_manager.monitored_stats_health_verbose_log.level`
configuration
5. Add the following configuration
```
logging:
loggers:
- name: plugins.taskManager
level: debug
```
6. Restart Kibana
7. Notice `Latest Monitored Stats:` are logged at debug level (as usual)
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 09:32:41 -05:00
Shahzad
c4aca1fc65
[Synthetics] Test run details step tabs ( #144966 )
2022-11-14 15:28:43 +01:00
Boris Kirov
296769a314
[APM] Small design uplifts of the Mobile APM overview page ( #144998 )
...
## Summary
closes https://github.com/elastic/kibana/issues/144455
In this PR we've updated some of the initial overview experience for
Mobile APM services by:
- rearranging the panels on the Overview page for improved mobile and
APM experience
- fitting all the Most used widgets into one panel, and rearranging them
- adding a callout for feedback
- adding a technical preview badge
- update the Embeddable component visual and size
Related links:
https://github.com/elastic/apm-dev/issues/823
https://github.com/elastic/kibana/issues/143498
https://github.com/elastic/kibana/issues/143501
https://github.com/elastic/kibana/issues/143504
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Kate Patticha <aikaterini.patticha@elastic.co>
2022-11-14 07:22:30 -07:00
Stratoula Kalafateli
a5cfe8ec0d
[Lens] Hide the random sampling settings from the UI ( #145071 )
...
## Summary
Hides the random sampling layer settings from the UI until we decide how
we want to introduce it to our users.
2022-11-14 16:14:21 +02:00
Shahzad
e580f23b13
[Synthetics] Added total step duration ( #144993 )
2022-11-14 15:00:20 +01:00
Christos Nasikas
ea6a270c21
Fix "techinical preview" label overlap on the connector's create flyout ( #145095 )
...
## Summary
Fixes https://github.com/elastic/kibana/issues/144976
### Checklist
Delete any items that are not applicable to this PR.
- [x] This renders correctly on smaller devices using a responsive
layout. (You can test this [in your
browser](https://www.browserstack.com/guide/responsive-testing-on-local-server ))
- [x] This was checked for [cross-browser
compatibility](https://www.elastic.co/support/matrix#matrix_browsers )
### For maintainers
- [x] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process )
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 15:54:29 +02:00
Antonio
46a71979c0
[Cases] Increase default page size cases table and save preferences in url/localStorage ( #144228 )
...
## Summary
Issues:
https://github.com/elastic/kibana/issues/131806
https://github.com/elastic/kibana/issues/140008
* Increase the default table size of the cases table to 10
* Changed the available page sizes to 10, 25, 50 and 100
* Save the visualization preferences of the cases table in localStorage
* Display the current visualization preferences of the cases table in
the URL
* This logic is not applied if the cases table is opened in a modal
### Screenshots
<img width="1441" alt="Screenshot 2022-10-31 at 12 19 10"
src="https://user-images.githubusercontent.com/1533137/198996468-f33ef67b-4f18-467e-841c-dfcff1574c06.png ">
### Checklist
Delete any items that are not applicable to this PR.
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common scenarios
- [ ] This was checked for [cross-browser
compatibility](https://www.elastic.co/support/matrix#matrix_browsers )
---
Fixes #140008
## Release notes
* Increase the default table size of the cases table to 10
* Save the visualization preferences of the cases table in localStorage
* Display the current visualization preferences of the cases table in
the URL
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 14:37:51 +01:00
Jonathan Buttner
1e77d8d10d
[Cases] Assignees enhancements ( #144836 )
...
WIP
This PR implements some enhancements for the assignees feature that
wasn't completed in 8.5.
Issue: https://github.com/elastic/kibana/issues/141057
Fixes: https://github.com/elastic/kibana/issues/140889
### List sorting
The current user is not brought to the front of lists (only in the
popovers). Unknown users are still placed at the end of the list.
<details><summary>Current user is sorted like other users</summary>
#### Case View Page
#### Case List Page Avatars
</details>
### Limit assignee selection
Leverage the `limit` prop exposed by the `UserProfilesSelectable` here:
https://github.com/elastic/kibana/pull/144618
<details><summary>Adding limit message</summary>
</details>
### Show the selected count
Show the selected count even when it is zero so the component doesn't
jump around.
<details><summary>Selected count</summary>
#### View case page
#### All cases filter
</details>
### Expandable assignees column
Added a button to expand/collapse the assignee avatars column on the all
cases list page
<details><summary>Cases list page assignees column</summary>
</details>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 08:27:10 -05:00
Devin W. Hurley
ec849e5bd8
[Security Solution] [Exceptions] Adds a new react route for viewing details about an individual exception list ( #144754 )
...
## Summary
Clicking on the link for an individual exception list will route users
to the detail view. Currently only displays the list id on the detail
view.
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 07:32:52 -05:00
Maryam Saeidi
2d5709f030
[Actionable Observability] Fix alerts' blank page in case of invalid query string ( #145067 )
...
Implements #143641
## 📝 Summary
Fixes the alerts page crash when a wrong query is entered in the search
bar query string.
**Note**
I am working on tests but I will create a separate PR for that.
## 🧪 How to test
- Go to alerts / rule details page
- Enter an invalid query such as `{`, page should not crash and you
should see a toast with a related error message
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2022-11-14 13:22:57 +01:00
Sergi Massaneda
6bba30f94c
[Security Solution] Tines connector ( #143505 )
...
## Summary
Issue: https://github.com/elastic/kibana/issues/140066
Doc:
https://docs.google.com/document/d/14BY-6CIin1CUH5bwJJgfrGl37hWO-CeNMdl_35agpvk/edit?usp=sharing
Create a new connector type that offers low friction/low effort approach
to augmenting Elastic capabilities with SOAR capabilities of Tines.
## Implementation
Tines connector implements subActionConnector. With 4 subActions
configured:
- **stories**: Retrieves the User available Story objects from Tines, to
render the Story selector options in the params form. It uses the
`email` and `token` authentication headers from the configuration.
It is requested only when the form opens and when the connector instance
changes.
- **webhooks**: Retrieves the Story available Webhooks objects from
Tines, to render the Webhook selector in the params form. It uses the
`email` and `token` authentication headers from the configuration and
the `story_id` parameter.
There is no filter for `type` in the actions (a.k.a. agents) endpoint,
so we have to request all actions and filter them by `type ===
'Agents::WebhookAgent'` on our side.
It is requested every time the selected story changes.
- **run**: The main action execution. It sends the alerts to the Tines
configured webhook, using webhook' `path` and `secret` values. There's
no template to render, the data coming from the execution is just pruned
(the `kibana` entry is removed from all `context.alerts`) and sent
directly using the same format to Tines.
- **test**: The test form execution. It ends up calling **run** but
using a parametrized body.
### Pagination
Both **stories** and **webhooks** subActions need pagination, since
Tines do not expose any search endpoint for them. The current hard limit
is 100 pages. The `paginatedRequest` function in the connector
implementation encapsulates this logic.
## Testing
1- Create a [Tines](https://www.tines.com/ ) free account.
2- Create a [new
Story](https://www.tines.com/docs/quickstart/simple-story ) and attach a
[Webhook
Action](https://www.tines.com/docs/quickstart/creating-an-action ) to
start receiving events.
3- Create an [API token](https://www.tines.com/api/authentication )
4- Configure the Tines Connector in Kibana using the Tines tenant URL
that has been generated in the Tines app, the email used to sign in, and
the API token generated.
[docs](https://github.com/semd/kibana/blob/140066_tines_connector/docs/management/connectors/action-types/tines.asciidoc#connector-configuration )
5- Attach the Tines Connector to a Detection Rule, selecting the Story
and Webhooks created.
[docs](https://github.com/semd/kibana/blob/140066_tines_connector/docs/management/connectors/action-types/tines.asciidoc#actions )
6- After each rule execution, events should appear in the Tines webhook
action.
## Screenshots
Configure a Tines connector
Use the Tines connector
Tines events
### Checklist
Delete any items that are not applicable to this PR.
- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing ), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md )
- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html )
was added for features that require explanation or tutorials
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common
scenarios(https://chrome.google.com/webstore/detail/axe-web-accessibility-tes/lhdoppojpmngadmnindnejefpokejbdd?hl=en-US ))
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Jonathan Buttner <56361221+jonathan-buttner@users.noreply.github.com>
2022-11-14 13:04:47 +01:00
Søren Louv-Jansen
f893523d63
[APM] Fixes #144669 : Incorrect “Learn more” link ( #145077 )
...
Fixes https://github.com/elastic/kibana/issues/144669
2022-11-14 03:31:45 -07:00
Miriam
d82113483b
[APM] Unskip failing test fleet ( #145073 )
...
Closes https://github.com/elastic/kibana/issues/144907
2022-11-14 02:36:47 -07:00
Søren Louv-Jansen
654d531efd
[APM] Limit the number of source map artifacts ( #144963 )
2022-11-12 07:25:55 -07:00
Bhavya RM
6d1f17ceda
Adding dashboard render verify tests to upgraded saved objects in integration test ( #145036 )
...
Please note these tests don't run in ci
2022-11-11 11:42:34 -05:00
Tim Rühsen
e58e6976fa
[Profiling] Fix ordering of CPU incl. subfunctions in TopN Functions ( #145013 )
...
Kibana client fetches all functions from the server.
Kibana client only shows the Top 100 functions, dependent on column sort
order.
Fixes https://github.com/elastic/prodfiler/issues/2723
2022-11-10 16:53:15 -08:00
Lola
b1bb5917de
[8.6] [Session view] file/network alerts UX enhancements ( #144768 )
...
## Summary
Summarize your PR. If it involves visual changes include a screenshot or
gif.
[mplement UX enhancements to process alerts for file/network
alerts.](https://github.com/orgs/elastic/projects/828/views/31 )
- UX enhancements to show different alerts categories(process, file, and
network)
- Each alert category has an associated icon
- Group alerts show danger icons
- Filter menu will be shown when there at least two alert categories
- Click an alert category from the filter menu will filter the alerts
and update alert count status message.
Network Alerts
<img width="1703" alt="image"
src="https://user-images.githubusercontent.com/17135495/200449915-6250aa0d-6e81-481f-9733-5f948b87b378.png ">
File and Process Alerts
<img width="1712" alt="image"
src="https://user-images.githubusercontent.com/17135495/200452712-f6714b80-22a9-48fe-9f74-406e73482fc0.png ">
Group View
<img width="1410" alt="image"
src="https://user-images.githubusercontent.com/17135495/200453470-eb8bb92f-773d-4bca-b20d-ea73f4f8b4f8.png ">
List View
<img width="370" alt="image"
src="https://user-images.githubusercontent.com/17135495/200453547-3170799e-23a0-462a-9e38-c6a9fb6ba748.png ">
### Checklist
Delete any items that are not applicable to this PR.
- [X] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common scenarios
### For maintainers
- [X] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process )
2022-11-10 16:03:41 -05:00
Kevin Delemme
fc11d73e89
chore(slo): small refactoring improvements ( #144930 )
2022-11-10 15:28:27 -05:00
Jonathan Budzenski
3b28367593
skip suite failing es promotion. #145022
2022-11-10 14:10:49 -06:00
Kyle Pollich
fc3c3a95e9
[Fleet] Add ?full query param to deprecated package info API ( #145012 )
...
## Summary
The policy editor page still uses this deprecated API, so we need to add
the new `?full` query parameter to its schema as well
Fixes https://github.com/elastic/kibana/issues/144982
2022-11-10 11:37:02 -07:00
Bena Kansara
c520da99ee
Adds additional context to recovered alerts of Infrastructure rules ( #144683 )
...
## Summary
Closes https://github.com/elastic/kibana/issues/143725 ,
https://github.com/elastic/kibana/issues/143726
This PR reads the context variables indexed in Alerts-As-Data for
`Infrastructure Rules` and adds it to context when alerts are recovered.
Also, the context variables are now flattened before being indexed in
AAD for both of the `Infrastructure Rules`.
## The context newly added for recovered alerts with this PR
- `cloud.*`
- `host.*`
- Excluding:
- `host.cpu.*`
- `host.disk.*`
- `host.network.*`
- `orchestrator.*`
- `container.*`
- `labels.*`
- `tags`
### Checklist
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html )
were updated or added to match the most common scenarios
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2022-11-10 19:26:02 +01:00
Michael Olorunnisola
aaf8462a38
[Security Solution][Investigations] - Fix pagination ( #145004 )
...
## Summary
This PR addresses https://github.com/elastic/kibana/issues/144975 .
Why this happened: Filter status was added here in this PR:
https://github.com/elastic/kibana/pull/144291/files#diff-5796dde9b49a93dcce15ee9ea2133002123cbb9802033e07ae9db0c9739d08c6R266 ,
but wasn't passed through here
https://github.com/elastic/kibana/pull/142737/files#diff-6ab300638b4c9d274e5508a7a9d3f94ca62e3ead9839ad6d536c09affbbef877R443
. This led to a value of `undefined` always being passed for
`filterStatus` within the query, preventing the necessary update in the
`useEffect`.
This PR re-introduces the pass through of that value.
https://user-images.githubusercontent.com/17211684/201157342-8e434d0d-fcac-42fb-b4c7-715e465156a6.mov
2022-11-10 11:24:53 -07:00
