Commit graph

46297 commits

Author SHA1 Message Date
Bharat Pasupula
54b6e65a20
[Automatic Import] Remove pipeline tests from the package (#211223)
## Summary

This PR removes unused pipeline tests from the packaging of integration.

The pipeline tests are not run today when the integration is built.
Hence removing them for now.
2025-02-17 10:28:57 +01:00
Gerard Soldevila
0ecbbd52be
SKA: Fix kebab-case issues in obs-ux-logs packages (#211347)
## Summary

This PR aims at relocating some of the Kibana modules (plugins and
packages) into a new folder structure, according to the _Sustainable
Kibana Architecture_ initiative.

> [!IMPORTANT]
> * We kindly ask you to:
> * Manually fix the errors in the error section below (if there are
any).
> * Search for the `packages[\/\\]` and `plugins[\/\\]` patterns in the
source code (Babel and Eslint config files), and update them
appropriately.
> * Manually review
`.buildkite/scripts/pipelines/pull_request/pipeline.ts` to ensure that
any CI pipeline customizations continue to be correctly applied after
the changed path names
> * Review all of the updated files, specially the `.ts` and `.js` files
listed in the sections below, as some of them contain relative paths
that have been updated.
> * Think of potential impact of the move, including tooling and
configuration files that can be pointing to the relocated modules. E.g.:
>     * customised eslint rules
>     * docs pointing to source code

> [!NOTE]
> * This PR has been auto-generated.
> * Any manual contributions will be lost if the 'relocate' script is
re-run.
> * Try to obtain the missing reviews / approvals before applying manual
fixes, and/or keep your changes in a .patch / git stash.
> * Please use
[#sustainable_kibana_architecture](https://elastic.slack.com/archives/C07TCKTA22E)
Slack channel for feedback.

Are you trying to rebase this PR to solve merge conflicts? Please follow
the steps describe
[here](https://elastic.slack.com/archives/C07TCKTA22E/p1734019532879269?thread_ts=1734019339.935419&cid=C07TCKTA22E).

#### 1 packages(s) are going to be relocated:

| Id | Target folder |
| -- | ------------- |
| `@kbn/logs-overview` | `x-pack/platform/packages/shared/logs-overview`
|


<details >
<summary>Updated references</summary>

```
./package.json
./packages/kbn-ts-projects/config-paths.json
./src/platform/packages/private/kbn-repo-packages/package-map.json
./tsconfig.base.json
./x-pack/.i18nrc.json
./x-pack/platform/packages/shared/logs-overview/jest.config.js
./yarn.lock
.github/CODEOWNERS
```

</details><details >
<summary>Updated relative paths</summary>

```
x-pack/platform/packages/shared/logs-overview/jest.config.js:10
x-pack/platform/packages/shared/logs-overview/tsconfig.json:2
```

</details>
2025-02-17 09:08:38 +01:00
Arturo Lidueña
117802cbb2
Pass system message to inferenceCliente.chatComplete (#211263)
Closes #211257 

## Summary

Regression introduced in 8.18
(https://github.com/elastic/kibana/pull/199286)

We no longer pass the `system` message to the inference plugin, and
thereby the LLM. This means that we are only passing user messages to
the LLM. The system message is important in steering the conversation,
and providing guardrails to the LLM.
2025-02-16 09:43:50 +01:00
Gerard Soldevila
11cd98bfc1
SKA: Fix kebab-case issues in search-kibana packages (#211348)
## Summary

This PR aims at relocating some of the Kibana modules (plugins and
packages) into a new folder structure, according to the _Sustainable
Kibana Architecture_ initiative.

> [!IMPORTANT]
> * We kindly ask you to:
> * Manually fix the errors in the error section below (if there are
any).
> * Search for the `packages[\/\\]` and `plugins[\/\\]` patterns in the
source code (Babel and Eslint config files), and update them
appropriately.
> * Manually review
`.buildkite/scripts/pipelines/pull_request/pipeline.ts` to ensure that
any CI pipeline customizations continue to be correctly applied after
the changed path names
> * Review all of the updated files, specially the `.ts` and `.js` files
listed in the sections below, as some of them contain relative paths
that have been updated.
> * Think of potential impact of the move, including tooling and
configuration files that can be pointing to the relocated modules. E.g.:
>     * customised eslint rules
>     * docs pointing to source code

> [!NOTE]
> * This PR has been auto-generated.
> * Any manual contributions will be lost if the 'relocate' script is
re-run.
> * Try to obtain the missing reviews / approvals before applying manual
fixes, and/or keep your changes in a .patch / git stash.
> * Please use
[#sustainable_kibana_architecture](https://elastic.slack.com/archives/C07TCKTA22E)
Slack channel for feedback.

Are you trying to rebase this PR to solve merge conflicts? Please follow
the steps describe
[here](https://elastic.slack.com/archives/C07TCKTA22E/p1734019532879269?thread_ts=1734019339.935419&cid=C07TCKTA22E).

#### 1 packages(s) are going to be relocated:

| Id | Target folder |
| -- | ------------- |
| `@kbn/search-shared-ui` | `x-pack/solutions/search/packages/shared-ui`
|


<details >
<summary>Updated references</summary>

```
./package.json
./packages/kbn-relocate/utils/transforms.ts
./packages/kbn-ts-projects/config-paths.json
./src/platform/packages/private/kbn-repo-packages/package-map.json
./tsconfig.base.json
./x-pack/.i18nrc.json
./x-pack/solutions/search/packages/shared-ui/jest.config.js
./yarn.lock
.github/CODEOWNERS
```

</details><details >
<summary>Updated relative paths</summary>

```
x-pack/solutions/search/packages/shared-ui/jest.config.js:14
x-pack/solutions/search/packages/shared-ui/tsconfig.json:2
```

</details>
2025-02-16 09:39:06 +01:00
Gerard Soldevila
299a91c83d
SKA: Fix kebab-case issues in obs-ai-assistant packages (#211346)
## Summary

This PR aims at relocating some of the Kibana modules (plugins and
packages) into a new folder structure, according to the _Sustainable
Kibana Architecture_ initiative.

> [!IMPORTANT]
> * We kindly ask you to:
> * Manually fix the errors in the error section below (if there are
any).
> * Search for the `packages[\/\\]` and `plugins[\/\\]` patterns in the
source code (Babel and Eslint config files), and update them
appropriately.
> * Manually review
`.buildkite/scripts/pipelines/pull_request/pipeline.ts` to ensure that
any CI pipeline customizations continue to be correctly applied after
the changed path names
> * Review all of the updated files, specially the `.ts` and `.js` files
listed in the sections below, as some of them contain relative paths
that have been updated.
> * Think of potential impact of the move, including tooling and
configuration files that can be pointing to the relocated modules. E.g.:
>     * customised eslint rules
>     * docs pointing to source code

> [!NOTE]
> * This PR has been auto-generated.
> * Any manual contributions will be lost if the 'relocate' script is
re-run.
> * Try to obtain the missing reviews / approvals before applying manual
fixes, and/or keep your changes in a .patch / git stash.
> * Please use
[#sustainable_kibana_architecture](https://elastic.slack.com/archives/C07TCKTA22E)
Slack channel for feedback.

Are you trying to rebase this PR to solve merge conflicts? Please follow
the steps describe
[here](https://elastic.slack.com/archives/C07TCKTA22E/p1734019532879269?thread_ts=1734019339.935419&cid=C07TCKTA22E).

#### 2 packages(s) are going to be relocated:

| Id | Target folder |
| -- | ------------- |
| `@kbn/observability-ai-common` |
`x-pack/solutions/observability/packages/observability-ai/observability-ai-common`
|
| `@kbn/observability-ai-server` |
`x-pack/solutions/observability/packages/observability-ai/observability-ai-server`
|


<details >
<summary>Updated references</summary>

```
./package.json
./packages/kbn-ts-projects/config-paths.json
./src/platform/packages/private/kbn-repo-packages/package-map.json
./tsconfig.base.json
./x-pack/solutions/observability/packages/observability-ai/observability-ai-common/jest.config.js
./x-pack/solutions/observability/packages/observability-ai/observability-ai-server/jest.config.js
./yarn.lock
.github/CODEOWNERS
```

</details><details >
<summary>Updated relative paths</summary>

```
x-pack/solutions/observability/packages/observability-ai/observability-ai-common/jest.config.js:10
x-pack/solutions/observability/packages/observability-ai/observability-ai-common/tsconfig.json:2
x-pack/solutions/observability/packages/observability-ai/observability-ai-server/jest.config.js:10
x-pack/solutions/observability/packages/observability-ai/observability-ai-server/tsconfig.json:2
```

</details>
2025-02-16 07:54:16 +01:00
christineweng
ece08bd3f6
[Security Solution] Expandable flyout - update preview shadow (#211098)
## Summary

Improved UI on preview background

Before


![image](https://github.com/user-attachments/assets/5ae595a3-ebdc-4a18-a58d-6e65eb61574a)


After

![image](https://github.com/user-attachments/assets/e8f9aafb-6bcc-42e3-ab92-0c394be4d695)



### Checklist

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-14 22:07:54 -06:00
Ievgen Sorokopud
6006546dc4
[Rules migration][Integration test] Stats APIs (#11232) (#211315)
## Summary

[Internal link](https://github.com/elastic/security-team/issues/10820)
to the feature details

Part of https://github.com/elastic/security-team/issues/11232

This PR covers SIEM Migrations Stats APIs:
* Retrieves the stats for the specific migration: (route: `GET
/internal/siem_migrations/rules/{migration_id}/stat`)
* Retrieves the stats for all the existing migrations, aggregated by
`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)
* Retrieves the translation stats for the migration: (route: `GET
/internal/siem_migrations/rules/{migration_id}/translation_stats`)
2025-02-15 00:30:43 +01:00
Gerard Soldevila
89b05458ad
SKA: Fix kebab-case issues in cloud-security-posture packages (#211314) 2025-02-14 16:12:16 -05:00
Vitalii Dmyterko
fc5adc02fe
[Security Solution][Detection Engine] fixes lists/items API when @timestamp field is number (#210440)
## Summary

- addresses https://github.com/elastic/security-team/issues/11831

**To Reproduce**

1. Create Security lists/items in 7.17 by uploading value list
https://www.elastic.co/guide/en/security/current/value-lists-exceptions.html
2. Upgrade to 8.18
3. Visit detection engine page to ensure .lists-{SPACE} and
.items-{SPACE} data streams have been created. Would be enough to lookup
value lists in lists UI
https://www.elastic.co/guide/en/security/current/value-lists-exceptions.html#edit-value-lists
4. Go to Kibana Upgrade assistant
5. Reindex .lists-{SPACE} and .items-{SPACE}  data streams
6. After reindex lists are not retrievable with error
`"data.0.@timestamp: Expected string, received number"
` through `/lists/_find` API

**After fix**

`@timestamp` of number type will be converted to ISO string

**To test**

use 8.18 mirror of this branch:
https://github.com/elastic/kibana/pull/210439

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-14 21:09:53 +01:00
Georgii Gorbachev
262969d15d
[Security Solution] Show deprecated bulk endpoints in Upgrade Assistant: some clean-up (#209545)
**Addresses:** https://github.com/elastic/kibana/issues/193184
**Is a follow-up to:** https://github.com/elastic/kibana/pull/207091,
https://github.com/elastic/kibana/pull/208090,
https://github.com/elastic/kibana/pull/207906

## Summary

This PR follows after our recent changes made to the Upgrade Assistant
and does some minor cleanup:

- The doc link is renamed to `legacyRuleManagementBulkApiDeprecations`
for the sake of being more specific.
- The deprecation level is changed to `warning` in accordance to what we
have in `8.x` and `8.18`.
2025-02-14 20:18:41 +01:00
Gerard Soldevila
239bd8db9b
SKA: Fix kebab-case issues in observability-ui packages (#211248)
## Summary

This PR aims at relocating some of the Kibana modules (plugins and
packages) into a new folder structure, according to the _Sustainable
Kibana Architecture_ initiative.

> [!IMPORTANT]
> * We kindly ask you to:
> * Manually fix the errors in the error section below (if there are
any).
> * Search for the `packages[\/\\]` and `plugins[\/\\]` patterns in the
source code (Babel and Eslint config files), and update them
appropriately.
> * Manually review
`.buildkite/scripts/pipelines/pull_request/pipeline.ts` to ensure that
any CI pipeline customizations continue to be correctly applied after
the changed path names
> * Review all of the updated files, specially the `.ts` and `.js` files
listed in the sections below, as some of them contain relative paths
that have been updated.
> * Think of potential impact of the move, including tooling and
configuration files that can be pointing to the relocated modules. E.g.:
>     * customised eslint rules
>     * docs pointing to source code

> [!NOTE]
> * This PR has been auto-generated.
> * Any manual contributions will be lost if the 'relocate' script is
re-run.
> * Try to obtain the missing reviews / approvals before applying manual
fixes, and/or keep your changes in a .patch / git stash.
> * Please use
[#sustainable_kibana_architecture](https://elastic.slack.com/archives/C07TCKTA22E)
Slack channel for feedback.

Are you trying to rebase this PR to solve merge conflicts? Please follow
the steps describe
[here](https://elastic.slack.com/archives/C07TCKTA22E/p1734019532879269?thread_ts=1734019339.935419&cid=C07TCKTA22E).

#### 3 packages(s) are going to be relocated:

| Id | Target folder |
| -- | ------------- |
| `@kbn/observability-utils-browser` |
`x-pack/solutions/observability/packages/utils-browser` |
| `@kbn/observability-utils-common` |
`x-pack/solutions/observability/packages/utils-common` |
| `@kbn/observability-utils-server` |
`x-pack/solutions/observability/packages/utils-server` |


<details >
<summary>Updated references</summary>

```
./package.json
./packages/kbn-ts-projects/config-paths.json
./src/platform/packages/private/kbn-repo-packages/package-map.json
./tsconfig.base.json
./x-pack/solutions/observability/packages/utils-browser/jest.config.js
./x-pack/solutions/observability/packages/utils-common/jest.config.js
./x-pack/solutions/observability/packages/utils-server/jest.config.js
./x-pack/solutions/observability/packages/utils-server/jest.integration.config.js
./yarn.lock
.github/CODEOWNERS
```

</details><details >
<summary>Updated relative paths</summary>

```
x-pack/solutions/observability/packages/utils-browser/jest.config.js:10
x-pack/solutions/observability/packages/utils-browser/tsconfig.json:2
x-pack/solutions/observability/packages/utils-common/jest.config.js:10
x-pack/solutions/observability/packages/utils-common/tsconfig.json:2
x-pack/solutions/observability/packages/utils-server/jest.config.js:10
x-pack/solutions/observability/packages/utils-server/jest.integration.config.js:10
x-pack/solutions/observability/packages/utils-server/tsconfig.json:2
```

</details>
2025-02-14 19:34:14 +01:00
jennypavlova
54365584b0
[Infra] Fix hosts view dashboards tab permission test (#210988)
Closes #203740 

## Summary

I managed to reproduce the failure locally only once and it happened
because the wrong tab was clicked. It is hard to reproduce it so I was
thinking about a way to avoid the step of clicking on the tab: As this
test is checking only the permissions I changed the navigation to open
the tab from the beginning of the test (with the main flow we test the
same navigation so we don't have to repeat the same steps here to test
the tab content)
2025-02-14 19:27:58 +01:00
Georgii Gorbachev
9600de4338
[Security Solution] Refactor prebuilt rule customization test plans, part 1 (#211300)
**Epic:** https://github.com/elastic/kibana/issues/174168
**Partially addresses:**
https://github.com/elastic/kibana/issues/202068,
https://github.com/elastic/kibana/issues/202078,
https://github.com/elastic/kibana/issues/202079

## Summary

We're cleaning up and refactoring our existing test plans for prebuilt
rule customization, upgrade, and export/import workflows.

Specifically, in this PR we're consistently:

- Changing the file names and test plan titles.
- Adding or expanding test plan summaries.
- Regenerating tables of contents using the [Markdown All in
One](https://marketplace.visualstudio.com/items?itemName=yzhang.markdown-all-in-one)
VS Code extension.

No "functional" changes have been made to any test plans, such as
adding, removing, or updating any scenarios.

This refactoring prepares the test plans for being "functionally"
changed and improved in follow-up PRs. For example, we're going to cover
the logic described in https://github.com/elastic/kibana/issues/210358
and address any other gaps in coverage.
2025-02-14 18:22:45 +00:00
Ievgen Sorokopud
819fd7a3e9
[Rules migration][Integration test] Update migration API (#11232) (#211196)
## Summary

[Internal link](https://github.com/elastic/security-team/issues/10820)
to the feature details

Part of https://github.com/elastic/security-team/issues/11232

This PR covers SIEM Migrations Update API (route: `PUT
/internal/siem_migrations/rules/{migration_id}`) integration test:
* Happy path
  * update migration
  * ignore attributes that are not eligible for update
* Error handling
  * an empty content response
  * an error when rule's id is not specified
  * an error when undefined payload has been passed

Also, as part of this PR, I added error handling cases for Create API:
* no content error
* an error when undefined payload has been passed
* an error when original rule id is not specified
* error when original rule vendor is not specified
* an error when original rule title is not specified
* an error when original rule description is not specified
* an error when original rule query is not specified
* an error when original rule query_language is not specified

---------

Co-authored-by: Sergi Massaneda <sergi.massaneda@gmail.com>
2025-02-14 18:39:21 +01:00
Agustina Nahir Ruidiaz
0c8685fc57
[Security Solution] [Onboarding] Integrations tab separators not showing on dark mode (#210380)
## Summary

This PR addresses https://github.com/elastic/kibana/issues/208986



https://github.com/user-attachments/assets/31afe060-1258-4336-a3d9-fca561d244d1


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-14 18:16:38 +01:00
Jedr Blaszyk
44ef445f8a
[Connectors] Disable Elastic-managed connectors (#211178)
## Summary

Disable Elastic-managed connectors in stack. Force user to convert to
self-managed



https://github.com/user-attachments/assets/90c477f0-a801-4a64-8177-dc4c687c5451




### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ x [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [x] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-14 18:00:23 +01:00
Viduni Wickramarachchi
c1d0559738
[Obs AI Assistant] Fix connector test in MKI (#211235)
Closes https://github.com/elastic/kibana/issues/211175

## Problem

The connectors test is failing Serverless because we now have a
pre-configured inference connector

## Solution

Filter out the pre-configured inference connector in tests

### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2025-02-14 11:35:42 -05:00
Joe Reuter
0a50f776eb
🌊 Streams - Better error handling (#211197)
In a bunch of places we would directly show `error.message` in toasts.
This is not always the right value, because the actual error is
sometimes wrapped in an HttpError. At some places we would already
unpack this correctly using a helper function - I made sure it's used
everywhere.

One example where this can be tested is when trying to map a child in an
incompatible way - let's say a field is mapped as long in
`logs.child.subchild`, then the user tries to map the same field as
keyword in `logs.child`. Previously it would just say "BadRequest", now
it says:
<img width="378" alt="Screenshot 2025-02-14 at 15 02 53"
src="https://github.com/user-attachments/assets/0abb51db-2bac-407e-bb51-beb74b3f9adb"
/>
2025-02-14 17:17:06 +01:00
Pablo Machado
7e498881d8
[Security Solution] Unskip non-flaky test (#211217)
## Summary

I ran this test 200 times, and it succeeded.
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/7872
2025-02-14 13:14:16 -03:00
Kibana Machine
6de2ef0e6d skip failing test suite (#209228) 2025-02-15 02:48:05 +11:00
Maxim Palenov
ecd33168b1
[Security Solution] Test plan for upgrading prebuilt rules with preview (Rule Upgrade flyout) v1 (#205645)
**Epics:** https://github.com/elastic/security-team/issues/1974
(internal), https://github.com/elastic/kibana/issues/174168
**Addresses:** https://github.com/elastic/kibana/issues/202078

## Summary

This PR adds a test plan for rule upgrade flyout.

---------

Co-authored-by: Georgii Gorbachev <georgii.gorbachev@elastic.co>
2025-02-14 16:21:09 +01:00
Maxim Palenov
e29033a726
[Security Solution] Test plan for upgrading prebuilt rules without preview (Rule Updates table) v2 (#205922)
**Addresses:** https://github.com/elastic/kibana/issues/202078

## Summary

This PR extends rule upgrade test plan with customizable and
non-customizable field examples. Rule upgrade workflow test plan
(excluding Rule Upgrade flyout) was initially extended in
https://github.com/elastic/kibana/pull/203331.

https://github.com/elastic/kibana/pull/203331 adds the following rule
upgrade workflow scenarios

- Scenario: User can upgrade conflict-free prebuilt rules one by one
- Scenario: User cannot upgrade prebuilt rules one by one from Rules
Update table if they have conflicts
- Scenario: User can upgrade multiple conflict-free prebuilt rules
selected on the page
- Scenario: User cannot upgrade selected prebuilt rules with conflicts
- Scenario: User can upgrade all available conflict-free prebuilt rules
at once*
- Scenario: User cannot upgrade all prebuilt rules at once if they have
upgrade conflicts
- Scenario: User can upgrade only conflict-free rules when a mix of
rules with and without conflicts are selected for upgrade
- Scenario: User can upgrade only conflict-free rules when attempting to
upgrade all rules
- Scenario: User can upgrade rule with rule type change individually
- Scenario: User can not bulk upgrade selected rules with rule type
changes
- Scenario: User can not bulk upgrade all rules with rule type changes
- Scenario: API does not upgrade prebuilt rules if they are up to date

---------

Co-authored-by: Georgii Gorbachev <georgii.gorbachev@elastic.co>
2025-02-14 16:18:40 +01:00
Alex Szabo
c44580f38a skip failing suite (#205987) 2025-02-14 15:33:43 +01:00
Maxim Palenov
67163cb802
[Security Solution] Fix flakiness in prebuilt_rules_preview.cy.ts (#211034)
## Summary

This PR fixes Rule Management Prebuilt Rules preview Cypress tests flakiness. The flakiness was localized to `prebuilt_rules_preview.cy.ts`.

## Problem details

Quite recently Rule Management Prebuilt Cypress tests group started failing due to exceeding 1 hour execution limit. In normal conditions the group takes up to 45 minutes to run all the tests.

Investigation revealed the problem. It turned out the real prebuilt rules get installed while it's not expected. The absolute majority of the tests interact with a few prebuilt rule assets mocks to avoid heavy prebuilt rules package installation and installing more than 1K rules from the package. 


In particular `/internal/detection_engine/prebuilt_rules/_bootstrap` endpoint is invoked upon loading any Security Solution plugin's page and leads to installing a prebuilt rules package. The Cypress test code was organized in way that first the Rule Management page is opened and then API calls interception is set up. Since page loading may vary sometimes real calls to `/internal/detection_engine/prebuilt_rules/_bootstrap` went through.

Tests set up prebuilt rule assets mocks but real prebuilt rules package installation wiped out the mocks leading to failing tests. Since Cypress reruns failed tests execution time increases and exceeds the limit.

![image](https://github.com/user-attachments/assets/19f86316-a2bb-438d-a8b9-fe6985a5e88f)

*`installPrebuiltRuleAssets()` sets up `/internal/detection_engine/prebuilt_rules/_bootstrap` calls interception.

## Flaky test runs

**Before:**

- `prebuilt_rules_preview.cy.ts` was run in Flaky test runner with 100 iterations. The CI is green but it's easy to notice some jobs took approximately 1 hour to run.
  🔴  https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/7870

**After:**

- `prebuilt_rules_preview.cy.ts` with the fix was run in Flaky test runner with 100 iterations. Execution time approximately 15 minutes for each job.
   https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/7873

- Rule Management Prebuilt Cypress tests group was run with 100 iterations
    https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/7875
2025-02-14 15:13:32 +01:00
Marco Gavazzoni
1ee13cae70
APM telemetry collection Otel agent distro diferentiation - issue 489 (#210775)
## Summary

This PRs follows the [closed PR
](https://github.com/elastic/kibana/pull/208770) and Closes
https://github.com/elastic/observability-bi/issues/489

As requested in [this comment
](https://github.com/elastic/kibana/issues/186281#issue-2357143823) and
tracked by the issue https://github.com/elastic/kibana/issues/186281
this PR handles main changes introduced to address the request for
capturing open-ended OTel distro agent names with patter
`opentelemetry/<LANGUAGE>/<DISTRO_NAME>`. These changes ensure that new
agent names won’t be dropped in telemetry.



### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-14 16:11:29 +02:00
Nicolas Chaulet
6ecb66df7f
[Fleet] Additional datastreams permissions API (#210452) 2025-02-14 09:06:12 -05:00
Kibana Machine
f5182586cd skip failing test suite (#211215) 2025-02-15 00:52:19 +11:00
Kerry Gallagher
c9dfe9aab1
[Streams] Schema Editor advanced field mapping options (#210667)
## Summary

Closes https://github.com/elastic/streams-program/issues/88

Adds JSON advanced field mapping parameters to the Schema Editor.

Main questions here are around the types and data structure. In this PR
these are added as an `additionalProperties` property, but we may also
want to have all of these parameters top level (like `type` and
`format`). This version makes separating concerns easier in the UI and
separating "first class" options vs advanced options, I could see pros
and cons to both, and also things might be "upgraded" from advanced to
first class later on. Also an open question on whether the
`MappingProperty` type needs to be explicitly redefined for Zod (ES will
obviously reject anything that isn't supported here).

![Screenshot 2025-02-12 at 13 01
35](https://github.com/user-attachments/assets/7082fed7-f445-476f-abb7-8f41d693d378)


![json_params](https://github.com/user-attachments/assets/521df9bf-cbd4-468a-9385-5787cdd5f906)
2025-02-14 13:52:18 +00:00
Agustina Nahir Ruidiaz
791be62934
[Security Solution][Onboarding] Card icons poor contrast on dark mode (#210870)
## Summary

This PR addresses https://github.com/elastic/kibana/issues/206086
<img width="1142" alt="Screenshot 2025-02-12 at 16 50 32"
src="https://github.com/user-attachments/assets/22d3fe32-729a-499b-8f5e-5a1e30f85e09"
/>
<img width="1097" alt="Screenshot 2025-02-12 at 16 51 10"
src="https://github.com/user-attachments/assets/778d21ac-eec9-4184-9bc0-7714391217c1"
/>


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-02-14 13:56:58 +01:00
Robert Oskamp
d4c40e7821
Skip serverless AI assistant connector tests for MKI runs (#211180)
## Summary

This PR skips the serverless Observability AI assistant connectors API
integration test suite for MKI runs.

Failure details in #211175
2025-02-14 13:13:33 +01:00
José Luis González
596312b02c
[Search] Remove coming soon pages (#211168)
## Summary

Removing CTA buttons prompting users to read that Elastic managed
connectors and web crawlers will be available coming soon. Self-managed
flavour will be the only possibility from 9.0

[Serverless] Empty page for Connectors:

![CleanShot 2025-02-14 at 10 05
43@2x](https://github.com/user-attachments/assets/7ad0e96a-1d08-4c18-a92a-62137ff7b49f)

[Serverless] Empty page for Web Crawlers:

![CleanShot 2025-02-14 at 10 06
07@2x](https://github.com/user-attachments/assets/e213e6ce-e01f-419b-ad04-7c11b8c7a853)

[ECH] Empty page for Web Crawlers: 

![CleanShot 2025-02-14 at 11 08
18@2x](https://github.com/user-attachments/assets/896ae9db-cc5f-4e19-9c96-d427387fcc7f)



### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [ ]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] If a plugin configuration key changed, check if it needs to be
allowlisted in the cloud and added to the [docker
list](https://github.com/elastic/kibana/blob/main/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker)
- [ ] This was checked for breaking HTTP API changes, and any breaking
changes have been approved by the breaking-change committee. The
`release_note:breaking` label should be applied in these situations.
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

### Identify risks

Does this PR introduce any risks? For example, consider risks like hard
to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified
risk. Invite stakeholders and evaluate how to proceed before merging.

- [ ] [See some risk
examples](https://github.com/elastic/kibana/blob/main/RISK_MATRIX.mdx)
- [ ] ...
2025-02-14 12:55:46 +01:00
Tiago Costa
2b5214f9e1
skip flaky suite (#211174) 2025-02-14 11:26:28 +00:00
Georgiana-Andreea Onoleață
d1d1b6b063
[ResponseOps][Rules] Move the params of tracking containment rule type to @kbn/response-ops-rule-params package (#210955)
Connected with https://github.com/elastic/kibana/issues/195188

## Summary

- Moved the params of tracking containment rule type to
`@kbn/response-ops-rule-params/geo_containment` package

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-14 12:29:18 +02:00
Georgiana-Andreea Onoleață
0d4be1db49
[ResponseOps][Rules] Move the params of transform health rule type to the @kbn/response-ops-rule-params package (#210990)
Connected with https://github.com/elastic/kibana/issues/195188

## Summary

- Moved the params of transform health rule type to
@kbn/response-ops-rule-params/transform_health package

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-14 12:29:02 +02:00
jennypavlova
ec09b758a6
[APM] Service name search bar bottom border is not visible when loading the table (#211016)
Closes #211014 
## Summary

This PR fixes the overlapping search bar with the service table when
loading and adds a small gap between:

![image](https://github.com/user-attachments/assets/12f96950-92bf-41fa-88ca-7e320d79f4cc)

| Before | After |
|-------|-------|
|
![image](https://github.com/user-attachments/assets/042e9717-da82-43e5-b535-69713a73e806)
|
![image](https://github.com/user-attachments/assets/3d71f5ad-1c5b-48f8-a443-2d2212039eb8)
|
2025-02-14 11:05:02 +01:00
Joe Reuter
455f36bdde
🌊 Streams: Unskip and complete dashboard suggestion tests (#210368)
Closes https://github.com/elastic/kibana/issues/208016

Adds a new dataset for the tag-association test (didn't find a good
existing one)

For the MKI flakiness, I don't think this is related to this test but
rather another test leaking SOs. I added some robustness against this,
but ideally we fix this in the offending test. Maybe we should add a
little something that checks for leaky state after a suite closes and
fails if there is something? That goes beyond the scope of this issue
though.
2025-02-14 10:57:33 +01:00
Eamonn-OL
995b851148
Fix notify_badge.tsx toggle not working (#208996)
## Summary

At the moment, when you click on the notify badge in the "rules" page,
then click it again (expecting a toggle) it actually gets stuck on the
page and only a refresh can fix it.

This change adds a toggle and implements it in place of the
"openPopover" to correctly toggle the state of the popover.

### Checklist

- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)



## Release Notes

Fixes an issue where the popover in the rules page may get stuck when
being clicked more than once.

Before:


https://github.com/user-attachments/assets/2f092d63-ab69-41df-9047-1ba11481ea15

After:


https://github.com/user-attachments/assets/d1ef9abc-e0ee-44cb-ae75-0219047c4a67

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-14 09:56:43 +00:00
Dzmitry Lemechko
ddd0fdb479
[scout] enable eslint plugin playwright (#210666)
## Summary

Closes https://github.com/elastic/kibana/issues/21030

It was a quick work to do while we don't have many tests yet. 

For reviewers: we most likely will review and update the rules to align
better with final test design for Scout before GA. I don't think we have
to deep dive into what rules are missing, but just to make sure I didn't
restrict something important from your perspective.

Rules are described in
https://github.com/playwright-community/eslint-plugin-playwright?tab=readme-ov-file#rules

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2025-02-14 10:21:49 +01:00
Marco Liberati
34baecba3e
[Lens][Embeddable] Fix memory leak on ES|QL variables subscription (#210826)
## Summary

This PR fixes a bug due to multiple subscription created by the ESQL
variables logic in the embeddable to never been cancelled.
The fix was to move the subscription in the loader module and make it
cleanup correctly together with other subscription.

Unit tests have been added to check the correct re-render behaviour.


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-02-14 10:18:55 +01:00
Tomasz Kajtoch
df6df00979
Enable the new Borealis theme (#210468)
Resolves https://github.com/elastic/eui-private/issues/169

## Summary

This PR makes Borealis the default theme in Serverless (traditional
kibana flavor already uses Borealis as the default) and adds a
`coreRendering.defaultThemeName` LD feature flag to allow a graceful
switch when this code gets deployed next week.

To switch back to Amsterdam when developing locally, set
`feature_flags.overrides.coreRendering.defaultThemeName: amsterdam` in
`kibana.dev.yml`

Please note that `DEFAULT_THEME_TAGS` still includes both Amsterdam and
Borealis. We've decided to keep Amsterdam bundled in case of any
unexpected errors. We'll make Amsterdam opt-in and reduce the bundle
size within the next two weeks (target date Feb 21st).

For the sake of a straightforward review of this PR, I will remove the
previously defined `theme:name` UI setting and `themeSwitcherEnabled`
logic in a follow-up PR.

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-02-14 09:39:01 +01:00
Tiago Costa
203bc28478
chore(NA): upgrade to webpack 5 (#191106)
### Summary

- Closes #89741

This PR contains the resulting work of a massive effort that ports our
on top bundler abstraction (called @kbn/optimizer) from Webpack v4 into
Webpack v5. It's essential in terms of long term maintenance since v4
was not receiving updates any longer but will also unblock some new
features that could be beneficial for our future DevEx endeavours.

Next you can find a small list of all the accomplished tasks on this
journey.

### Completed Tasks
- [x] Upgrade dependencies to match the ones on webpack v5
- [x] Fix null-loader usages
- [x] Fix raw-loader usages
- [x] Fix file-loader usages
- [x] Fix url-loader usages
- [x] Fix `@kbn/optimizer-webpack-helpers` to support webpack v5 
- [x] Adopt previous webpack v4 polyfill-all strategy with
node-polyfill-webpack-plugin
- [x] Fix theme-loader on @kbn/optimizer
- [x] Migrate configurations and ad-hoc loader options on all webpack
configs from v4 to v5
- [x] Fix @kbn/test jest resolver for file-loader cases
- [x] Migrate public-path loader on UiSharedDeps
- [x] Fix all usages of webpack-merge
- [x] Migrate BundleRemoteModule
- [x] Migrate BundleRemotesPlugin
- [x] Correctly migrate PopulateBundleCachePlugin
- [x] Correctly migrate BundleMetricsPlugin
- [x] Check if the profiling plugins still work (--profile flag)
- [x] Recover if possible the previous webpack v4 cacheGroup chunks
rename to something like `data.plugin.chunk.0.js`
- [x] Run `/ci` and make sure we get our first green CI, otherwise work
on the errors until we do
- [x] Profile and solve bottlenecks until we get a cold build
performance similar to the one we had on webpack v4 (`node
scripts/build_kibana_platform_plugins --no-cache`).
- [x] OpenSSL Legacy Warnings: try to remove `--openssl-legacy-provider
` flags
- [x] Add Webpack to Renovate config
- [x] Explore removing `NodePolyfillPlugin`
([here](https://www.npmjs.com/package/node-polyfill-webpack-plugin)) and
add each polyfill needed individually per each webpack config to check
if we get smaller bundles. If we do it's better to go with the case by
case need approach instead of deploying a bunch of polyfills with
NodePolyfillPlugin. As another alternative, create a custom smaller
plugin with only the union of all needed polyfills.
- [x] Evaluate if we want to touch the resolutions on mainFields and
conditionNames
- [x] Understand why `@import 'src/core/public/mixins'` does not work
anymore (not a problem, we should use relative paths anyway but we want
to track why it changed from v4 to v5)
- [x] BUG: Child compilers are having errors hidden and/or changed from
error to warning
- [x] Fix license check for
[Artistic-2.0](https://spdx.org/licenses/Artistic-2.0.html) is the
license for
[domain-browser](https://github.com/bevry/domain-browser?tab=License-1-ov-file).
This package is a dependency of
[NodePolyfillPlugin](https://www.npmjs.com/package/node-polyfill-webpack-plugin).
Artistic 2.0 license is [classified as
yellow](https://github.com/elastic/open-source/blob/main/elastic-product-policy.md#yellow-list)
and should only be used for dev dependencies.
- [x] Make sure `resourceQuery: { not: /raw/ }` is not necessary on
other webpack configs like storybook one
- [x] Find what is being wrongly removed by usedExports optimization;
hint: I believe it is identifying a lot of exports inside the sync entry
of plugins as unused exports and removing them. Then `__kbnBootstrap__`
can't be found
- [x] Rebalance @kbn/optimizer pickMaxWorkerCount
- [x] Re-open the issue to fix sass-warnings
[#190345](https://github.com/elastic/kibana/issues/190345) or downgrade
sass-loader to v10
- [x] Remove previous esm no parse rules
- [x] Confirm esm support is working
- [x] Confirm console override is needed
- [x] Confirm react prod builds on ui shared deps for distributable
- [x] Remove customization for
[xyflow](https://github.com/xyflow/xyflow) from webpack configs
- [x] Clean all the code
- [x] Make sure collected metrics from stats are still aligned with what
we were collecting before; also verify if the modules used for optimizer
caches etc are well generated (@kbn/node-libs-browser)
- [x] Fix watch performance

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Brad White <brad.white@elastic.co>
2025-02-14 03:01:36 +00:00
Samiul Monir
84fdbcba62
[Inference] Updating link text for model_id (#211087)
## Summary

Updating link text for `model_field` field to have `Learn more.` when
the provider is Elasticsearch.

### screenshots:

#### Elasticsearch provider
![Screenshot 2025-02-13 at 2 26
13 PM](https://github.com/user-attachments/assets/a4b12e99-c69a-47b4-ba9d-81786f39d82c)

#### Other providers
![Screenshot 2025-02-13 at 2 26
28 PM](https://github.com/user-attachments/assets/ba35f36b-fc5d-48e5-91cf-1f37b96f95ec)


### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [X] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [X] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-02-13 17:05:42 -05:00
Kyle Pollich
11211cfb27
[Fleet] Make sure null checks are included for agentless next steps tile (#211068)
## Summary

Closes https://github.com/elastic/security-team/issues/11870

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Nicolas Chaulet <nicolas.chaulet@elastic.co>
2025-02-13 22:53:37 +01:00
Philippe Oberti
96b4f8442e
[Security Solution][Network details] add ability to show full network flyout from preview (#211065)
## Summary

This PR is a follow up of [this
PR](https://github.com/elastic/kibana/pull/187870) that replaced the old
network/ip flyout with a new panel for the expandable flyout. Since then
we improved the UI or preview and added the ability to jump to a full
flyout from its preview.

This PR fixes the issues where users could not navigate to the full
details network/ip flyout from a preview. This functionality already
exists for the alert, event, host and user flyouts. The PR adds a new
footer to the network/ip flyout - only shown in preview mode - that
allows users to navigate to the full detail network/ip flyout.

| Old behavior  | New behavior |
| ------------- | ------------- |
| ![Screenshot 2025-02-13 at 11 53
22 AM](https://github.com/user-attachments/assets/8ecc5ad4-1038-4fd4-9f56-3e7d0e497b06)
| ![Screenshot 2025-02-13 at 11 34
19 AM](https://github.com/user-attachments/assets/bfb909f0-5be8-4f97-af66-4ed3292e6bc3)
|

The user has the ability to navigate to the full detail flyout:


https://github.com/user-attachments/assets/4c809e5d-0b59-4498-9966-0133d139233b

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-02-13 14:54:34 -06:00
Pierre Gayvallet
1aac3188a1
InferenceChatModel: Fix tool call response conversion (#210840)
## Summary

Related to https://github.com/elastic/kibana/issues/206710

While working on https://github.com/elastic/kibana/pull/210831, I
discovered some issue with the way we convert tool response messages
from langchain (json as string) to the inference plugin's internal
format (parsed/structured json).

In practice, this impacts mostly the `gemini` adapter, as it's the only
one expecting strictly an object type for the tool response (and the
provider throws an error otherwise). Other providers such as bedrock and
openAI already receive responses as strings, so we were mostly
double-encoding the content, which is fine for the LLM's understanding
of the call.

This PR addresses it, by properly parsing tool call responses in the
langchain->inference conversion logic, and add a second layer of safety
with an additional check in the Gemini adapter directly.

This PR also add a new `signal` parameter to the `InferenceChatModel`
constructor, as I also discovered that some of the security's usages of
langchain are passing the signal that way instead of passing it for each
individual model invocations (which makes sense for chains and graphs).
2025-02-13 21:20:13 +01:00
Ievgen Sorokopud
44fdf81bbe
[Rules migration][Integration test] Create migration API (#11232) (#210999)
## Summary

[Internal link](https://github.com/elastic/security-team/issues/10820)
to the feature details

Part of https://github.com/elastic/security-team/issues/11232

This PR covers SIEM Migrations CREATE API (route:
`/internal/siem_migrations/rules/{migration_id?}`) integration test:
* Create migration with provided ID
* Create migration without provided ID
* Create migration with rules that have resources
* Error handling ("no content") when no rules provided

Also, as part of this PR, I addressed this comment to my previous
changes
https://github.com/elastic/kibana/pull/210867#discussion_r1954344990
2025-02-13 20:20:06 +01:00
seanrathier
4fe72b62b1
[Cloud Security] fix setupTechnology GCP credential type swapping (#210668) 2025-02-13 20:06:37 +01:00
Angela Chuang
ca81958c29
[SecuritySolution] Network page crashes after interacting with map (#206773)
## Summary

Issues and steps to reproduce:
https://github.com/elastic/kibana/issues/206761


https://github.com/user-attachments/assets/a6e2753e-2728-478d-b46b-bcd19ff83c9e



### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.


- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2025-02-14 02:57:07 +08:00
Angela Chuang
b2db698f03
[SecuritySolution] Hover actions not working on the overview section of the host details page (#210819)
## Summary

Fixes https://github.com/elastic/kibana/issues/210815


Steps to verify:
1. Ingest some data
2. Visit host details page
3. Hover onto host ID and IP address, verify filter in / filter out /
add to timeline / show top N works correctly.


https://github.com/user-attachments/assets/75148ebb-154d-42a4-ae75-127925564d8a
2025-02-14 02:47:41 +08:00
Sergi Massaneda
789986ce48
[Security Solution][SIEM migrations] Use cloud onboarding config (#210921)
## Summary

This PR retrieves the Cloud onboarding data to pre-select the SIEM
migration topic in the onboarding hub when necessary.
The Cloud logic was implemented
[here](https://github.com/elastic/kibana/pull/204129)

<img width="1364" alt="Captura de pantalla 2025-02-13 a les 11 50 31"
src="https://github.com/user-attachments/assets/28707314-da9b-439a-baa9-f6fb53c170fa"
/>
2025-02-13 19:28:22 +01:00