mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 17:59:23 -04:00
11c0bacdab
Reverts https://github.com/elastic/kibana/pull/168553 Seeing these errors when updating existing alerts as data mappings ``` [2023-10-13T11:06:44.254-04:00][ERROR][plugins.alerting] ResponseError: illegal_argument_exception Root causes: illegal_argument_exception: can't merge a non-nested mapping [faas.trigger] with a nested mapping at KibanaTransport.request (/Users/ying/Code/kibana_prs/node_modules/@elastic/transport/src/Transport.ts:535:17) at processTicksAndRejections (node:internal/process/task_queues:95:5) ``` Needs further investigation as ECS mappings should be backwards compatible
233 lines
5.9 KiB
TypeScript
233 lines
5.9 KiB
TypeScript
/*
|
|
* Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
|
|
* or more contributor license agreements. Licensed under the Elastic License
|
|
* 2.0 and the Server Side Public License, v 1; you may not use this file except
|
|
* in compliance with, at your election, the Elastic License 2.0 or the Server
|
|
* Side Public License, v 1.
|
|
*/
|
|
|
|
/**
|
|
* The user fields describe information about the user that is relevant to the event.
|
|
* Fields can have one entry or multiple entries. If a user has more than one id, provide an array that includes all of them.
|
|
*/
|
|
export interface EcsUser {
|
|
changes?: {
|
|
/**
|
|
* Name of the directory the user is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* User email address.
|
|
*/
|
|
email?: string;
|
|
/**
|
|
* User's full name, if available.
|
|
*/
|
|
full_name?: string;
|
|
group?: {
|
|
/**
|
|
* Name of the directory the group is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* Unique identifier for the group on the system/platform.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Name of the group.
|
|
*/
|
|
name?: string;
|
|
};
|
|
|
|
/**
|
|
* Unique user hash to correlate information for a user in anonymized form.
|
|
* Useful if `user.id` or `user.name` contain confidential information and cannot be used.
|
|
*/
|
|
hash?: string;
|
|
/**
|
|
* Unique identifier of the user.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Short name or login of the user.
|
|
*/
|
|
name?: string;
|
|
/**
|
|
* Array of user roles at the time of the event.
|
|
*/
|
|
roles?: string[];
|
|
};
|
|
|
|
/**
|
|
* Name of the directory the user is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
effective?: {
|
|
/**
|
|
* Name of the directory the user is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* User email address.
|
|
*/
|
|
email?: string;
|
|
/**
|
|
* User's full name, if available.
|
|
*/
|
|
full_name?: string;
|
|
group?: {
|
|
/**
|
|
* Name of the directory the group is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* Unique identifier for the group on the system/platform.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Name of the group.
|
|
*/
|
|
name?: string;
|
|
};
|
|
|
|
/**
|
|
* Unique user hash to correlate information for a user in anonymized form.
|
|
* Useful if `user.id` or `user.name` contain confidential information and cannot be used.
|
|
*/
|
|
hash?: string;
|
|
/**
|
|
* Unique identifier of the user.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Short name or login of the user.
|
|
*/
|
|
name?: string;
|
|
/**
|
|
* Array of user roles at the time of the event.
|
|
*/
|
|
roles?: string[];
|
|
};
|
|
|
|
/**
|
|
* User email address.
|
|
*/
|
|
email?: string;
|
|
/**
|
|
* User's full name, if available.
|
|
*/
|
|
full_name?: string;
|
|
group?: {
|
|
/**
|
|
* Name of the directory the group is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* Unique identifier for the group on the system/platform.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Name of the group.
|
|
*/
|
|
name?: string;
|
|
};
|
|
|
|
/**
|
|
* Unique user hash to correlate information for a user in anonymized form.
|
|
* Useful if `user.id` or `user.name` contain confidential information and cannot be used.
|
|
*/
|
|
hash?: string;
|
|
/**
|
|
* Unique identifier of the user.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Short name or login of the user.
|
|
*/
|
|
name?: string;
|
|
risk?: {
|
|
/**
|
|
* A risk classification level calculated by an internal system as part of entity analytics and entity risk scoring.
|
|
*/
|
|
calculated_level?: string;
|
|
/**
|
|
* A risk classification score calculated by an internal system as part of entity analytics and entity risk scoring.
|
|
*/
|
|
calculated_score?: number;
|
|
/**
|
|
* A risk classification score calculated by an internal system as part of entity analytics and entity risk scoring, and normalized to a range of 0 to 100.
|
|
*/
|
|
calculated_score_norm?: number;
|
|
/**
|
|
* A risk classification level obtained from outside the system, such as from some external Threat Intelligence Platform.
|
|
*/
|
|
static_level?: string;
|
|
/**
|
|
* A risk classification score obtained from outside the system, such as from some external Threat Intelligence Platform.
|
|
*/
|
|
static_score?: number;
|
|
/**
|
|
* A risk classification score obtained from outside the system, such as from some external Threat Intelligence Platform, and normalized to a range of 0 to 100.
|
|
*/
|
|
static_score_norm?: number;
|
|
};
|
|
|
|
/**
|
|
* Array of user roles at the time of the event.
|
|
*/
|
|
roles?: string[];
|
|
target?: {
|
|
/**
|
|
* Name of the directory the user is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* User email address.
|
|
*/
|
|
email?: string;
|
|
/**
|
|
* User's full name, if available.
|
|
*/
|
|
full_name?: string;
|
|
group?: {
|
|
/**
|
|
* Name of the directory the group is a member of.
|
|
* For example, an LDAP or Active Directory domain name.
|
|
*/
|
|
domain?: string;
|
|
/**
|
|
* Unique identifier for the group on the system/platform.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Name of the group.
|
|
*/
|
|
name?: string;
|
|
};
|
|
|
|
/**
|
|
* Unique user hash to correlate information for a user in anonymized form.
|
|
* Useful if `user.id` or `user.name` contain confidential information and cannot be used.
|
|
*/
|
|
hash?: string;
|
|
/**
|
|
* Unique identifier of the user.
|
|
*/
|
|
id?: string;
|
|
/**
|
|
* Short name or login of the user.
|
|
*/
|
|
name?: string;
|
|
/**
|
|
* Array of user roles at the time of the event.
|
|
*/
|
|
roles?: string[];
|
|
};
|
|
}
|