Commit graph

28346 commits

Author SHA1 Message Date
christineweng
dda650f91b
[Security Solution] KPI visualizations on Alerts Page (#149173)
## Summary

This PR is a part 2 of https://github.com/elastic/kibana/pull/146938
that populates the remaining 2 charts for the summary section on Alerts
Page.

Capabilities added

- Alerts by type: alert count by rule and by type (prevention vs.
detection)
- Top alerts: top 10 alert grouping based on user selected drop down

Changes from previous PR

- Refactor `useSeverityChartData` to `useSummaryChartData` so that it
can be used by all 3 charts to fetch data
- Move `SeverityLevel` chart up one level to `alerts_kpi` folder to
better isolate components for testing.

Feature flag: `alertsPageChartsEnabled`


![image](https://user-images.githubusercontent.com/18648970/213945018-57a15c60-ed53-4e86-90f5-c1909e88420d.png)

### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] This renders correctly on smaller devices using a responsive
layout. (You can test this [in your
browser](https://www.browserstack.com/guide/responsive-testing-on-local-server))
- [x] This was checked for [cross-browser
compatibility](https://www.elastic.co/support/matrix#matrix_browsers)


### For maintainers

- [ ] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 16:27:26 -07:00
Jiawei Wu
4a4138dc3a
[RAM][Flapping] Add flapping alert status to alert table (#149176)
## Summary
Resolves: https://github.com/elastic/kibana/issues/148759

Adds a new component that will display an alert's flapping status in
addition to its `active/recovered` status in the alerts table. This
component is used both in the O11Y alert table and the stack management
alerts table.

This PR also allows the new alert status badge component to be
shareable.

### Alerts Table: Active

![active](https://user-images.githubusercontent.com/74562234/213611338-151985f8-f320-4b04-86fe-4b25956c8b07.png)

### Alerts Table: Flapping

![flapping](https://user-images.githubusercontent.com/74562234/213611388-b969058d-b47f-4cb4-86b7-472d4996ae94.png)

### Alerts Table: Recovered (Recovered is preferred over flapping)

![recovered](https://user-images.githubusercontent.com/74562234/213611401-0b54e7a2-5b7e-4a33-b7f1-daead94188d6.png)

### Stack Management Alerts List:

![alertsList](https://user-images.githubusercontent.com/74562234/213612245-466a14a3-be0f-4c79-9c45-cc51f8eff83c.png)

### Checklist
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Xavier Mouligneau <xavier.mouligneau@elastic.co>
2023-01-30 16:20:14 -07:00
Achyut Jhunjhunwala
214eb97949
fix locally broken unit tests (#149811)
## Summary

Due to an old Pull request, 2 of the Unit Tests started to fail locally.
Somehow they won't fail on the CI which made them tough to identify
initially.

This PR fixes those broken unit tests.
2023-01-30 15:09:39 -07:00
Jiawei Wu
987cb6be76
[RAM] [Flapping] Allow rules settings to be access when users have no rules (#149656)
## Summary
Resolves: https://github.com/elastic/kibana/issues/149366

Move the rules settings link to the page header area so users can access
the rules settings even when they have no rules. Also make the rules
settings available on the logs page.

This change means we no longer have a purpose for the
`showCreateRuleButton` prop since we're no longer showing the "Create
Rule" button alongside the rule filters. So that prop has been removed.

This PR also adds small enhancements to our queries to no longer fetch
on windows focus as it was creating a slight flicker of the spinner when
the user has no rules. Refetching on focus is a little too aggressive
anyways since we already have a timed refetcher.

## Rules page (no rules)

![move_settings](https://user-images.githubusercontent.com/74562234/214997907-034f32fb-f9c6-4b90-8d60-7cc1746b1329.png)

## Rules page (with rules)

![withrule](https://user-images.githubusercontent.com/74562234/214997956-05de257e-41e2-423c-9f95-5928632b8dda.png)

## Logs page

![movesettingslogs](https://user-images.githubusercontent.com/74562234/214997928-5b1702ac-572b-4953-a95b-2e4143f3f17e.png)

### Checklist
- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Xavier Mouligneau <xavier.mouligneau@elastic.co>
2023-01-30 14:00:12 -08:00
Jiawei Wu
7608dfb023
[RAM][Flapping] Make rules settings link with flapping settings shareable (#149564)
## Summary
Resolves: https://github.com/elastic/kibana/issues/148760

Makes the rules setting link that opens up the flapping settings modal
shareable from the `triggers_action_ui` plugin (`getRulesSettingsLink`).

Also adds storybook entires for this component (`rulesSettingsLink`). 

To view locally, run `yarn storybook triggers_actions_ui`

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Xavier Mouligneau <xavier.mouligneau@elastic.co>
2023-01-30 13:59:19 -08:00
Nicolas Chaulet
e2e58635a3
[Fleet] Restrict output type for Fleet Server (#149873) 2023-01-30 14:58:30 -07:00
Marshall Main
4d353f0876
[Security Solution][Alerts] Alert suppression time window (#148868)
## Summary

Adds ability to specify a time window with alert suppression on Query
rules. If more alerts are detected with the same value in the "group by"
field in subsequent rule executions, the existing alert will be updated
to reflect the new doc count and suppression end time rather than
creating a new alert.

### Create Rule

![image](https://user-images.githubusercontent.com/55718608/212997145-cee96a7d-fc3b-4b08-8845-5a9c7876fa0a.png)

### Rule Details

![image](https://user-images.githubusercontent.com/55718608/212997293-69d93392-f74e-4e4e-925a-befbee531659.png)

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Mike Côté <mikecote@users.noreply.github.com>
2023-01-30 13:11:13 -08:00
Achyut Jhunjhunwala
065dfa1297
Disable navigation to _other bucket and show warning tooltip (#148641)
Closes https://github.com/elastic/kibana/issues/146650

### Summary

This PR disables the link for the `_other` bucket on Services List page
and instead shows a Warning Tooltip with the message.

### Changes

 - `service_link.tsx` prevents the navigation to the bucket
- `other_service_group_bucket.ts` - Syntrace for the `_other` bucket
generation
 
### Demo



https://user-images.githubusercontent.com/7416358/211568522-e10bcf01-d07f-4259-996b-b3b612c7807d.mov

- When kibana limit has been reached
<img width="1561" alt="image"
src="https://user-images.githubusercontent.com/1313018/214614001-0bd8a5d9-c2fe-48c7-a231-0b0805708bce.png">


- When having only `_other`
<img width="1569" alt="image"
src="https://user-images.githubusercontent.com/1313018/214614142-0d47d5b1-40d6-40f5-9a0d-5f5e596f9b98.png">

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Yngrid Coello <yngrid.coello@elastic.co>
2023-01-30 22:04:17 +01:00
Kyle Pollich
fe34d7f27e
[Fleet] Update experimental indexing features text + allow disabling TSDB (#149594)
## Summary

Closes #149591

Making some needed improvements/changes to our experimental data stream
features:
- Improve copy to better explain what these features are and what they
do
- Add explainer + link to
https://www.elastic.co/guide/en/elasticsearch/reference/master/use-a-data-stream.html#manually-roll-over-a-data-stream
for current need around manual rollovers
(https://github.com/elastic/kibana/issues/143448 coming soon for
automating this)


![image](https://user-images.githubusercontent.com/6766512/214857301-bb522d2a-f241-4c34-8bf5-bd96e610a139.png)

## Screen recording


https://user-images.githubusercontent.com/6766512/214861783-0efdbab9-51de-44f0-93ba-86011d6e9612.mov

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 13:24:38 -07:00
Shahzad
a489d221dd
[Synthetics] Some ui code clean up (#149821) 2023-01-30 20:30:20 +01:00
Jonathan Buttner
aba0b3037c
[Cases] Adding new bulk create attachments operation for auditing (#149744)
This PR adds a new authorization log operation for the bulk create
attachments API.

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 13:35:08 -05:00
Kibana Machine
ec293bfc28 skip failing test suite (#148386) 2023-01-30 13:22:35 -05:00
Kibana Machine
18e157a1a0 skip failing test suite (#148388) 2023-01-30 13:22:10 -05:00
Cauê Marcondes
ad75d900c9
[APM] Alert rules: The transaction type and environment options are not filtered by the selected service (#149849)
closes https://github.com/elastic/kibana/issues/128257



https://user-images.githubusercontent.com/55978943/215530743-46577bb1-5cdd-459c-990e-aae00f604720.mov

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 12:40:04 -05:00
Mark Hopkin
b9a999f7f8
[Fleet] Add Agent logs panic messages from last hour to telemetry (#149825)
## Summary

Closes https://github.com/elastic/ingest-dev/issues/1486

Add `agent_logs_panics_last_hour` telemetry field which contains the
message and timestamp of all log messages containing the word panic that
ocurred in the last hour.

Capped at 100 messages.
2023-01-30 17:20:08 +00:00
Sander Philipse
8251c7632f
[Enterprise Search] Fix pagination issue on indices page (#149833)
## Summary

Fixes a bug where the fetch indices request was incorrectly reporting
the page size
2023-01-30 18:18:26 +01:00
Pierre Gayvallet
e70fceaf9d
[FTR] KbnClientSavedObjects improvements (#149582)
## Summary

Follow-up of https://github.com/elastic/kibana/pull/149188


- Use the bulkDelete API for `KbnClientSavedObjects.bulkDelete`
- Create a dedicated `/_clean` endpoint for
`KbnClientSavedObjects.clean` and
`KbnClientSavedObjects.cleanStandardList`

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 09:05:53 -07:00
Julia Bardi
3a961fb132
[Fleet] changed diagnostics query to speed up (#149812)
## Summary

Changed query of diagnostics files to speed up seeing the files. This is
because the agent has a delay of about 4m to ack the action, this has to
be fixed separately, see here
https://github.com/elastic/elastic-agent/pull/1703#issuecomment-1408250493

Related to https://github.com/elastic/kibana/issues/141074

We can search for the diagnostics file by `agent_id` and `action_id`, so
don't have to wait for the `upload_id` which comes from
`.fleet-actions-results`.


https://user-images.githubusercontent.com/90178898/215451881-bfaa9e86-e055-4490-87b1-dc1d1076a738.mov

Displaying error from agent when diagnostics failed:

<img width="839" alt="image"
src="https://user-images.githubusercontent.com/90178898/215476207-5db7e935-28dd-432e-a6a6-195da162028a.png">


E.g. `.fleet-files-agent`

```
{
        "_index": ".fleet-files-agent-000001",
        "_id": "8a004559-0731-4b8f-b29e-d7405ca0d68c.3a1f21b3-4559-4d3f-aae0-58356c269a92",
        "_score": null,
        "_source": {
          "action_id": "8a004559-0731-4b8f-b29e-d7405ca0d68c",
          "agent_id": "3a1f21b3-4559-4d3f-aae0-58356c269a92",
          "contents": null,
          "file": {
            "ChunkSize": 4194304,
            "Status": "READY",
            "ext": "zip",
            "hash": {
              "md5": "",
              "sha256": ""
            },
            "mime_type": "application/zip",
            "name": "elastic-agent-diagnostics-2023-01-30T10-13-33Z-00.zip",
            "size": 577178
          },
          "src": "agent",
          "upload_id": "988da8ad-9d92-4d18-b5b0-b2a7e77f5a81",
          "upload_start": 1675073615066,
          "transithash": {
            "sha256": "8a417cc8a73e32723ff449b603412113f319c7447044e81acab3f57d4e8226c8"
          }
        },
```

Changed the style to be more consistent:

<img width="898" alt="image"
src="https://user-images.githubusercontent.com/90178898/215492173-7362fab7-15e6-4de9-824b-239164512231.png">



### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2023-01-30 09:04:35 -07:00
Kevin Delemme
894b195f60
feat(slo): manage slo state (#149546) 2023-01-30 11:02:33 -05:00
Jonathan Buttner
b76b23536b
[Cases] Adding basic integration test for get connectors API (#149764)
This PR adds a single test for the get connectors API. Since nearly all
the tests create a connector they need to live under the trial license
configuration.

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 11:02:10 -05:00
Paul Tavares
0eb7ed8e7c
[Security Solution][Endpoint] Re-enable FTR tests for Endpoint Responder (#149538)
## Summary

Re-enables FTR tests for Endpoint Response console. Tests seemed to be
failing only when checking functionality from an alert details panel
when displayed in either the Alerts page or the Timeline. No other
errors were seen on the failing jobs, so this PR only increases the
timeout value for how long we'll wait for alerts
2023-01-30 09:01:23 -07:00
Kevin Lacabane
d9adcca543
[Stack Monitoring] implement baseline elasticsearch api tests for package and metricbeat data (#149161)
### Summary

Part of https://github.com/elastic/kibana/issues/148303
Closes https://github.com/elastic/kibana/issues/146067
Closes https://github.com/elastic/kibana/issues/146068

I investigated the failing tests but couldn't get to the root cause
quickly enough so I took the opportunity to port the tests to the
[monitoring_api_integration](https://github.com/elastic/kibana/tree/main/x-pack/test/monitoring_api_integration)
suite. This reimplements all the existing tests (plus missing ones for
the `ml_jobs` api) with fresh data.
By using the new testing approach we can remove the archived mappings
which greatly reduce execution times.

### Testing
- The suite was executed against by the [flaky test
runner](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/1804)
multiple times with no failures
- Test data is bundled in two archives (one for metricbeat and one for
package data) and can be loaded to verify their content: `node
scripts/es_archiver.js load
x-pack/test/monitoring_api_integration/archives/elasticsearch/single_node/(package|metricbeat)
--es-url=http://elastic:changeme@localhost:9200
--kibana-url=http://elastic:changeme@localhost:5601`

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 17:01:00 +01:00
Kevin Delemme
c4ea96e5ce
feat(slo): improve index selection input (#149786) 2023-01-30 10:58:35 -05:00
Shahzad
15ddb87cdf
[Synthetics] Disable test now for private location (#149585)
Co-authored-by: florent-leborgne <florent.leborgne@elastic.co>
Fixes https://github.com/elastic/kibana/issues/137473
2023-01-30 16:04:02 +01:00
Kevin Delemme
a16806d90d
chore(slo): Improve fixtures and storybook cases (#149639) 2023-01-30 09:43:56 -05:00
Matthew Kime
a64027deed
[discover] Enable data view editing from flyout (#149453)
## Summary

Currently, changes to a data view require a round trip to management
when you're in discover. This PR allows editing of data views via flyout
from within discover.

Closes https://github.com/elastic/kibana/issues/144801


### Checklist

Delete any items that are not applicable to this PR.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Matthias Wilhelm <ankertal@gmail.com>
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 08:42:58 -06:00
Yngrid Coello
3d3a885ad7
[APM] Show warning if transaction groups are dropped (#148625)
Closes https://github.com/elastic/kibana/issues/146648.

### Changes
- `transaction_detail_link.tsx` prevent navigation to tx details when
bucket name is other and display the warning tooltip
- `xpack.apm.ui.transactionGroupBucketSize` ui setting was removed and
now we have a hardcoded limit of `1000` buckets when querying
transactions.

**After this change**


https://user-images.githubusercontent.com/1313018/214321647-e0ae59d6-0761-4d9e-a0fe-ef21397aeff7.mov


- When kibana limit has been reached
<img width="1391" alt="image"
src="https://user-images.githubusercontent.com/1313018/214321902-05fbfa6c-7c99-4b21-a67b-7e134c14ab73.png">

- When having only `_other`
<img width="1390" alt="image"
src="https://user-images.githubusercontent.com/1313018/214332887-d6fd59a2-d1ef-4b61-b6ed-79a6d458f0a0.png">

### Test instructions
1. Checkout PR branch
2. Execute Synthtrace scenario
    a. For reaching kibana limit callout
        ```
node scripts/synthtrace --clean other_transaction_group_bucket.ts
--scenarioOpts.txGroups=1001
        ```
    b. For `_other` callout
        ```
node scripts/synthtrace --clean other_transaction_group_bucket.ts
        ```

---------

Co-authored-by: Achyut Jhunjhunwala <achyut.jhunjhunwala@elastic.co>
2023-01-30 15:40:25 +01:00
Julia Rechkunova
82a4c5e6e0
[Discover] Show "Copy value" button for any grid cell (#149525)
Closes https://github.com/elastic/kibana/issues/108857

## Summary

Before we had "Copy to clipboard" only for cell popovers with JSON
content. This PR adds it also for any other cell values.

![Jan-25-2023
18-23-03](https://user-images.githubusercontent.com/1415710/214636400-b347e856-8bf0-4038-bc41-aae23df5e5a9.gif)

### Checklist

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)
- [x] This renders correctly on smaller devices using a responsive
layout. (You can test this [in your
browser](https://www.browserstack.com/guide/responsive-testing-on-local-server))
- [x] This was checked for [cross-browser
compatibility](https://www.elastic.co/support/matrix#matrix_browsers)
2023-01-30 15:34:09 +01:00
Shahzad
3406d4aba1
[Synthetics] Fix tooltip styling (#149804)
Fixes https://github.com/elastic/kibana/issues/148432
2023-01-30 14:49:53 +01:00
Sander Philipse
00dd82366a
[Enterprise Search] Fix bug updating connector configuration (#149810)
## Summary

This fixes a bug registering a connector configuration, caused by having
removed the connection between the configuration Redux logic and the API
Redux logic.
2023-01-30 08:05:53 -05:00
Mike Côté
c0891f7392
Fix flaky test where process_alerts_duration_ms can sometimes equal zero (#149602)
Resolves https://github.com/elastic/kibana/issues/148092

In this PR, I'm changing the event log metrics assertion on
`process_alerts_duration_ms` to ensure the value is >=0 instead of > 0.
There are times where `process_alerts_duration_ms` will run super fast
and the metrics only report `0ms`.

Flaky test runner:
-
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/1808

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 07:46:43 -05:00
Kevin Lacabane
870f79df8c
[Stack Monitoring] support entsearch package (#148668)
### Summary

Update stack monitoring to read from data streams created by the
[enterprisesearch
package](https://github.com/elastic/integrations/pull/4926)

### Testing
- build [enterprisesearch
package](https://github.com/elastic/integrations/pull/4926)
- start stack: `elastic-package stack up -v -d --version
8.7.0-SNAPSHOT`; make sure your image contains [this
change](https://github.com/elastic/elastic-agent/pull/2121)
- start enterprisesearch service: `elastic-package service up -v`
- install elasticsearch integration with variables
- `hosts: http://host.docker.internal:9201; username: elastic; password:
changeme`
- install enterprisesearch integration with variables
- `hosts: http://host.docker.internal:3002; username: elastic; password:
changeme`
- connect [local
kibana](2d893bf40b/x-pack/plugins/monitoring/dev_docs/how_to/work_with_packages.md (connecting-a-local-kibana))
- navigate to Stack Monitoring on the local kibana, enterprise search
section shows up with populated graphs

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 13:43:13 +01:00
Gergő Ábrahám
7eaa352c6c
[Security Solution] Add new default policy 'Data Collection' to endpoint onboarding (#149588)
## Summary

Added new configuration option for Elastic Defend integration's
Traditional Endpoint environment:
- Data Collection only configuration option
- uses the already available config policy (added here #144087)
- the default option is NGAV (as before)

Test:
- go to Management / Integrations
- select Elastic Defend
- press the 'Add Elastic Defend' button

<img width="1321" alt="image"
src="https://user-images.githubusercontent.com/39014407/214846703-9632f6e7-18a8-4312-a61d-8ee9255833e0.png">


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 13:11:52 +01:00
Tomasz Ciecierski
1e90bcdb22
[Osquery] Fix styling of Ecs Field and url slash issue (#148719) 2023-01-30 13:02:24 +01:00
Maryam Saeidi
1a1cfc65e6
[AO] Add alert summary widget to overview page (#149581)
Closes #138887

## 📝 Summary

This PR adds the Alert Summary Widget to the overview page.


![image](https://user-images.githubusercontent.com/12370520/215071851-5d48d80a-401e-49fa-8c6e-7a4ca33850a6.png)


## 🧪 How to test
Generate alerts and check the Alert Summary Widget component on the
overview page.

## 🐞 Kown issues
- The loading state will be covered in a separate ticket:
https://github.com/elastic/kibana/issues/149237
- At start, when there is no rule, the Alert Summary Widget shows an
error that will be fixed in this ticket:
https://github.com/elastic/kibana/issues/148653

---------

Co-authored-by: Katrin Freihofner <katrin.freihofner@elastic.co>
2023-01-30 11:54:28 +01:00
Dario Gieselaar
c224972f47
[APM] Ensure rolled up data is excluded by default (#148510)
Closes https://github.com/elastic/kibana/issues/148507
2023-01-30 11:10:42 +01:00
Dima Arnautov
fe5cd3f0d9
[ML] Remove Technical Preview label from the Trained Models UI. (#149715)
## Summary

Removes Technical Preview badges from the Trained Models UI. 

<img width="1234" alt="image"
src="https://user-images.githubusercontent.com/5236598/215152415-30f579b6-72a6-4e6f-afe3-d7613c232f4d.png">

<img width="1234" alt="image"
src="https://user-images.githubusercontent.com/5236598/215152456-4371c042-50f6-40b3-9239-7047a492d9be.png">
2023-01-30 10:46:58 +01:00
Janki Salvi
89dac164f2
[Cases] Update UI to use find user actions API (#149523)
## Summary

This PR updates UI to use `findUserActions` API introduced in #148861


### Checklist

Delete any items that are not applicable to this PR.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### How to test
Verify User action behaviour is same as before in Case View page

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2023-01-30 10:27:49 +01:00
Jordan
c47013b8af
[Cloud Posture] Rule template schema - 870 (#149409) 2023-01-29 07:28:24 -07:00
Ido Cohen
d9f4039ed6
[cloud security] support telemetry for cis_aws (#148964) 2023-01-29 13:13:29 +02:00
Stratoula Kalafateli
457aeb8750
[Lens] Fixes problem with query based annotations on the embeddable (#149684)
## Summary
Fixes #149667 

This is a quick fix for #149667 where the `initialize` method was used
on SO visualization state before hydrating it with the
`fromPersistableState`.

It would be even better to refactor the `initialize` method to detect if
the state has been hydrated and call it internally rather than have two
distinct methods, where the most appropriate one does not do what's
expected.

Before the fix

![image](https://user-images.githubusercontent.com/17003240/215092349-fda7d98c-07c7-48b8-b816-4c4ab1f15007.png)


After
<img width="817" alt="image"
src="https://user-images.githubusercontent.com/17003240/215092411-369548fb-35b3-4fd2-9bdf-fcddca1c7b5f.png">
2023-01-28 13:19:46 +02:00
Katerina Patticha
83293c945f
[APM] Fix statement to match function name (#149743)
## Summary

this time I did make sure I pushed it 🐒 

related to:
https://github.com/elastic/kibana/pull/149610#discussion_r1089366395
2023-01-28 12:09:41 +01:00
GitStart
afde6c2529
[Field editor] Field custom label description mentions Visualize (#149404)
[Field editor] Field custom label description mentions Visualize 

Resolves https://github.com/elastic/kibana/issues/148629

### Loom/Screenshot Demo

---------

Co-authored-by: Davis McPhee <davis.mcphee@elastic.co>
2023-01-27 21:17:49 -04:00
Karl Godard
1749dce65f
[Anduril] (D4C) added cloud_defend as a logs destination for fleet/elastic-agent (#149739)
## Summary

Adds to the appropriate mappings to ensure elastic-agent can write logs
for the new "Defend for containers" service coming in 8.8

### Checklist

Delete any items that are not applicable to this PR.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
2023-01-27 13:32:32 -08:00
Kathleen DeRusso
f53c30e2cb
[Enterprise Search] Engines passthrough search routes (#149461)
## Summary

Added endpoint to support _search in search passthrough API from enterprise search.

---------

Co-authored-by: saarikabhasi <nairsaarika.bhasi@elastic.co>
Co-authored-by: Saarika Bhasi <55930906+saarikabhasi@users.noreply.github.com>
2023-01-27 14:22:12 -07:00
Zacqary Adam Xeper
39a37d3ecb
[RAM] Update Rule Action Form to add Summary UX (#149367)
## Summary

Closes #143679 
Closes #143381

- Updates the action form UI to use `EuiSplitPanel` and other visual
changes specified in #143679
- For rule types with a summary available, enables the Summary/For each
dropdown and defaults it to summary
- Updates `rule_types` API to send `hasGetSummarizedAlerts` property

### Collapsed actions

<img width="600" alt="Screen Shot 2023-01-23 at 5 06 00 PM"
src="https://user-images.githubusercontent.com/1445834/214172700-f4d44c48-f771-42f9-ba1b-8db18f64b72b.png">

### Open actions (for rule type with summary available)
<img width="601" alt="Screen Shot 2023-01-23 at 2 06 11 PM"
src="https://user-images.githubusercontent.com/1445834/214172729-dd591815-4f9d-4bfa-9677-7ff537e37505.png">


### Open actions (for rule type without summary available)
<img width="592" alt="Screen Shot 2023-01-23 at 5 01 34 PM"
src="https://user-images.githubusercontent.com/1445834/214172770-988b81ff-617f-4351-a38d-f33e9a61d7bb.png">

### Checklist

Delete any items that are not applicable to this PR.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)
- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2023-01-27 14:14:23 -06:00
Cee Chen
8a2ecc3b4f
Upgrade EUI to v74.0.1 (#149457)
## Summary

`eui@73.0.0`  `eui@74.0.1`

---

## [`74.0.1`](https://github.com/elastic/eui/tree/v74.0.1)

**Bug fixes**

- Fixed `EuiModalHeaderTitle` type errors when passed `EuiTitle` props
([#6547](https://github.com/elastic/eui/pull/6547))

## [`74.0.0`](https://github.com/elastic/eui/tree/v74.0.0)

- Added the `component` prop to `EuiModalHeaderTitle`, which allows
overriding the default `h1` tag
([#6530](https://github.com/elastic/eui/pull/6530))
- Added the `titleProps` prop to `EuiConfirmModal`, which allows
overriding the default `h1` tag
([#6530](https://github.com/elastic/eui/pull/6530))

**Bug fixes**

- Fixed slight row height jumping in `EuiBasicTable`s when actions with
tooltips became disabled
([#6538](https://github.com/elastic/eui/pull/6538))

**Breaking changes**

- `EuiModalHeaderTitle` now **always** wraps its children in a `h1` tag
(previously attempted to conditionally detect whether its children were
raw strings or not). To change this tag type to, e.g. a more generic
`div`, use the new `component` prop.
([#6530](https://github.com/elastic/eui/pull/6530))
- `EuiLink` now applies `rel="noreferrer"` to all domains, including
`elastic.co` ([#6535](https://github.com/elastic/eui/pull/6535))
- `EuiBasicTable` no longer blocks mouse/keyboard interactions while
`loading` ([#6543](https://github.com/elastic/eui/pull/6543))

**CSS-in-JS conversions**

- Converted `EuiBasicTable` to Emotion
([#6539](https://github.com/elastic/eui/pull/6539))
- Added a new `RenderWithEuiTheme` render prop utility
([#6539](https://github.com/elastic/eui/pull/6539))

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-27 13:03:56 -06:00
Pete Hampton
0133fdc3f8
Add package version to prebuilt rule alert telemetry (#148954)
## Summary

This pull request adds the users installed detection rules package to
the alert telemetry.
This enables Threat Researchers / Detection Engineers to develop these
rules for more fine-grained filtering and tuning.

### Checklist

Delete any items that are not applicable to this PR.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### For maintainers

- [ ] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
2023-01-27 18:49:15 +00:00
Joseph McElroy
d1e0c27d5b
[Enterprise Search] Engines view api page (#149690)
https://user-images.githubusercontent.com/49480/215104280-fb9903b1-cbd9-40d6-8f56-9a2edfa544ad.mov

---------

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2023-01-27 18:27:25 +00:00
Shahzad
b18e8682a9
[Synthetics] Timings breakdown indicators (#149402)
Fixes https://github.com/elastic/kibana/issues/145387
2023-01-27 19:17:14 +01:00