Commit graph

76 commits

Author SHA1 Message Date
Sophie Chang
413d37d5ed [ML] Update http access modules for ECS (#29383)
* [ML] Initial commit for apache ecs module

* [ML] Update apache2 module for ECS

Rename following fields
event.module:apache
event.dataset:access
source.address
url.original
http.response.status_code
source.geo.location

Rationalise to only use one set of kibana saved objects for all http web access logs
Rename files from apache
Combined URL explorer into Count explorer dashboard as there was a lot of duplication
Add filter to custom url
Rename custom urls to Investigate Source IP and Status Code
Add chart to show overall event rate split by event.module - can tell if multiple datasets are included
Increase limit for top source ips from 5 to 50
Add created_by to custom setting for telemetry
Rename jobs and saved objects to include ecs tag

Tested side by side against v6 jobs

* [ML] Rename apache files from hyphen to underscores

* [ML] Further apache renames

Also change custom URLs to lower case to match "View series"
Change created_by to ml-module-apache-access

* [ML] Initial commit of nginx ml module

* [ML] Rename dashboard to generic explorer

* [ML] Further refinement for apache

Rename http_status_code to status_code_rate
Update custom url to use filters instead of lucene query bar

* [ML] Convert apache module to nginx

Copy files, keeping nginx logo
Multiple renames to nginx

* [ML] Make chart legend visible by default
2019-01-31 11:39:18 +00:00
Mike Côté
1b0f595f01
Add new "references" attribute to saved objects for relationships (#28199)
* Add new references attribute to saved objects

* Add dual support for dashboard export API

* Use new relationships API supporting legacy relationships extraction

* Code cleanup

* Fix style and CI error

* Add missing spaces test for findRelationships

* Convert collect_references_deep to typescript

* Add missing trailing commas

* Fix broken test by making saved object API consistently return references

* Fix broken api integration tests

* Add comment about the two TS types for saved object

* Only return title from the attributes returned in findRelationships

* Fix broken test

* Add missing security tests

* Drop filterTypes support

* Implement references to search, dashboard, visualization, graph

* Add index pattern migration to dashboards

* Add references mapping to dashboard mppings.json

* Remove findRelationships from repository and into it's own function / file

* Apply PR feedback pt1

* Fix some failing tests

* Remove error throwing in migrations

* Add references to edit saved object screen

* Pass types to findRelationships

* [ftr] restore snapshots from master, rely on migrations to add references

* [security] remove `find_relationships` action

* remove data set modifications

* [security/savedObjectsClient] remove _getAuthorizedTypes method

* fix security & spaces tests to consider references and migrationVersion

* Add space id prefixes to es_archiver/saved_objects/spaces/data.json

* Rename referenced attributes to have a suffix of RefName

* Fix length check in scenario references doesn't exist

* Add test for inject references to not be called when references array is empty or missing

* some code cleanup

* Make migrations run on machine learning data files, fix rollup filterPath for savedSearchRefName

* fix broken test

* Fix collector.js to include references in elasticsearch response

* code cleanup pt2

* add some more tests

* fix broken tests

* updated documentation on referencedBy option for saved object client find function

* Move visualization migrations into kibana plugin

* Update docs with better description on references

* Apply PR feedback

* Fix merge

* fix tests I broke adressing PR feedback

* PR feedback pt2
2019-01-30 15:53:03 -05:00
James Gowdy
ec607e26b9
[ML] Better handling of recognizer module manifest parsing errors (#29322) 2019-01-28 10:32:15 +00:00
James Gowdy
45b8ff99f0
[ML] Adding ability to override number of sample lines in File Data Visualizer (#29214)
* [ML] Adding ability to override number of sample lines in file data viz

* tiny tweak

* updating tests
2019-01-24 10:03:09 +00:00
Spencer
c052613962
[dashboard+gis] remove dark mode options (#29017)
* [dashboard+gis] remove dark mode options

* [reporting/extract] restore fixtures

* remove mentions of old `.theme-dark` class

* import panel styles from panel/_index.scss
2019-01-23 14:29:35 -08:00
James Gowdy
c91ec0d1ef
[ML] Adding privilege checks to File Data Visualizer (#29109)
* [ML] Adding privilege checks to File Data Visualizer

* fixing typo in comment
2019-01-22 17:07:53 +00:00
Pete Harverson
ed9a599b0d
[ML] Removes use of types from ES index and search calls (#28987) 2019-01-18 12:32:31 +00:00
Melissa Alvarez
7f8203715d
[ML] Add support to Data Visualizer for index patterns without a time field (#28511)
* Prevent docCount fetch and remove sidebar if no timeField set.

* Don't show metrics section if no metrics cards

* Add parens to conditional statement as per styleguide

* Don't create docCount card if not timeseries based
2019-01-14 12:31:46 -05:00
pavel06081991
19b84f0bc2
[ML] translate job validation messages (#28235)
[ML] translate job validation messages
2019-01-14 14:04:39 +03:00
pavel06081991
09ea8e35a3
[ML] translate models (#27888)
[ML] translate models
2019-01-14 12:24:30 +03:00
Nox911
2dfe4136b9 Translate ml -> server -> lib (#27974) 2019-01-08 11:13:17 +03:00
Pete Harverson
ef5e7a596e
[ML] Update REST endpoint calls to remove _xpack (#28069) 2019-01-04 16:48:05 +00:00
James Gowdy
0232b9b69e
[ML] Fix for audit message search size being 0 when jobs size is 0 (#27955) 2019-01-03 11:06:50 +00:00
Dimitris Athanasiou
b2f44622fe
[ML] Remove use of types in datafeeds (#27572)
This commit removes the use of types in datafeeds
and a few more places where it was possible.

Relates #26968
2019-01-02 09:34:38 +02:00
Walter Rafelsberger
7971b15cec
[ML] Fix audit messages. (#27575) 2018-12-21 10:59:52 +01:00
Pete Harverson
9b4a5a07d8
[ML] Handle removal of backend ml.enabled node attribute (#27604) 2018-12-21 09:13:30 +00:00
Walter Rafelsberger
5a7ab185f9
[ML] Adds a check if the current user can access the indexpattern required to clone a job. (#27496)
Adds a check if all index patterns necessary to clone a job are available for the current user. The check will only allow cloning of a job if the user has the right permissions and can still access the indexPattern the job was created for. An indexPattern could either have been deleted since the the job was created or the current user doesn't have the required permissions to access the indexPattern. The "Clone Job" action in the jobs list action menu will be greyed out and unavailable for that job.
2018-12-20 10:34:27 +01:00
Pete Harverson
bfa80411bb
[ML] Fix data visualizer to obtain total hit count as int (#27490) 2018-12-19 13:42:04 +00:00
Walter Rafelsberger
59d078e31c
[ML] Fix annotations feature startup behavior. (#27424)
* [ML] Fix annotations feature startup behavior.
* [ML] Move strings to constants.
2018-12-18 21:46:16 +01:00
Walter Rafelsberger
c6dc1a1fec
[ML] List all annotations in jobs list annotations table. (#27300)
* [ML] List all annotations in jobs list annotations table even outside analysis time range.
* [ML] Adjust the links time range if annotation is outside analysis time range.
2018-12-18 09:24:24 +01:00
Pete Harverson
6cc9bc2fc6
[ML] Adds created_by meta data for file data viz import indexes (#27303) 2018-12-17 15:28:04 +00:00
Pete Harverson
c334c40453
[ML] Updates to jobs and dashboards in auditbeat process modules (#27233) 2018-12-17 11:35:16 +00:00
Walter Rafelsberger
26c77eb25e
[ML] User Annotations (#26034)
Allows users to add/edit/delete annotations in the Single Series Viewer.
2018-12-14 14:09:52 +01:00
Pete Harverson
ae27e83712
[ML] Add rest_total_hit_as_int where total hits is required (#26421) 2018-12-04 09:25:24 +00:00
Pete Harverson
d97609eaeb
[ML] Aggregate anomalies table data using configured Kibana timezone (#26192)
* [ML] Aggregate anomalies table data using configured Kibana timezone

* [ML] Move dataFormatTz prop out of controller scope
2018-11-27 11:49:47 +00:00
Pete Harverson
cc07aa29d5
[ML] Edits to fields used in auditbeat module configurations (#25866) 2018-11-19 16:22:42 +00:00
Melissa Alvarez
354d7cc431
[ML] Add checkbox to enable model plot in Advanced job wizard (#25468)
* Move cardinality success check to utils

* enableModelPlot checkbox base added

* Run cardinality check on add/update fields

* Handle changes made via json

* only run cardinality check if model plot enabled

* Handle model plot enabled via EditJSON tab

* show message on cardinality check error

* multi-metric + pop: show message on cardinality check error

* add test for callout component

* Fix flexitem overflow in IE11
2018-11-16 13:41:08 -08:00
Pete Harverson
b52ddd206a
[ML] Adds auditbeat process data recognizer modules (#25716)
* [ML] Adds auditbeat process data recognizer modules

* [ML] Sorts Kibana objects by title in recognizer job wizard

* [ML] Rename auditbeat modules Kibana objects to snake_case

* [ML] Remove auditbeat docker module kibana files

* [ML] Add auditbeat docker kibana objects with lowercase names

* [ML] Remove auditbeat host module kibana files

* [ML] Add auditbeat host module files with lowercase filenames
2018-11-16 15:33:42 +00:00
Pete Harverson
1a3f0cac4b
[ML] Fixes recognizer job wizard to use dedicated index setting (#25706) 2018-11-15 14:40:41 +00:00
Pete Harverson
df0d62f6ed
[ML] Updates job type and APM module icon to new designs (#25380)
* [ML] Updates job type and APM module icon to new designs

* [ML] Use self closing tags for icons

* [ML] Removes unnecessary icon from jobs list
2018-11-08 21:13:59 +00:00
Walter Rafelsberger
3b94e3cece
[ML] Removes deprecated angularjs based jobs list and related code. (#25216) 2018-11-06 20:05:45 +01:00
Melissa Alvarez
830e149787
[ML] MultiMetric/Population Job creation: Allow model plot enablement via checkbox (#24914)
* Add route/api-mapping for validateCardinality

* Create directive for enableModelPlot checkbox

* Ensure model plot enabled prior to cardinality check

* Add callout when cardinality high

* ensure correct cardinality success check

* Population wizard: add enableModelPlot checkbox

* Update with suggested changes from review

* Remove warning when invalid. Add tests.

* Ensure checkbox updated on uncheck
2018-11-06 11:52:26 +00:00
Walter Rafelsberger
e5ebc62b16
[ML] Fixes typo. (#25130)
Fixes "Dectector" Typo.
2018-11-05 18:13:56 +01:00
James Gowdy
62f82c96f6
[ML] Fixing issues when trying to import non-timestamp data (#24894)
* [ML] Fixing issues when trying to import non-timestamp data

* making results link time range optional

* small cleanup after fixing merge conflict
2018-10-31 18:06:49 +00:00
Josh Dover
27e5406d7a
Upgrade Hapi in legacy platform to v17 (#21707)
* Disable even-better monitoring

* Upgrade to Hapi v15

* Upgrade to Hapi v16

* Handle optional req params correctly

* Update http and kbnServer

* Get mocha tests passing

* Convert `reply` usages [wip]

* Fix Joi and Plugin incompatibilities

* Get server up and running

* Get basic logging working

* Fix optimizer

* Fix recent route handlers

* Various fixes

* Fix recent routes

* Upgrade wreck for async/await

* Fix mocha tests

* Fix joi issues

* Fix xpack jest tests

* Fix recent routes

* Fix tests

* Fix index setup

* Decouple monitoring stats collection from good plugin

* Update reload logging test to work

* Reimplement logging with updated good plugin

* Fix unit tests

* Fix getConnections back

* Make LegacyLoggingServer compatible with Hapi v17

* Update joi types

* Fix x-pack unit tests

* Remove stray debugger

* Remove hapi-compat

* Fix API integrations

* Upgrade boom

* Fix security plugin

* Misc fixes

* bump

* Fix licensePreRoutingFactory

* Fix failing integration tests

* Remove unnecessary test change

* Remove hapi-latest package

* fx

* Various cleanup

* Fix race condition in oppsy events

* Use elastic/good fork

* Fix boom.wrap and hapi-latest changes

* Simplify LegacyLoggingServer updates

* package.json cleanup + test fix

* yarn.lock cleanup

* Change good tag

* Fixes

* Change return err -> throw err in routes

* Fix await returns

* Fix new load_data test

* Make cookie security flags consistent

* tmp doc

* Fix types

* Fix tests

* Upgrade canvas plugin

* Move good package to published @elastic/good one

* Fix SO test

* Fix logging reloading

* Update APM apis

* Fix error logging

* Fix logging test

* Convert spaces plugin

* Add validation error shim

* Remove 7.0 release notes

* Await renderApp

* Fix ccr routes

* Prevent header popovers from scrolling with page content (#23850)

* Fix spaces test

* new yarn.lock-s

* Fix spaces tests

* Remove h2o2-latest

* Fix @types/hapi

* Upgrade InfraOps plugin

* Fix package.json

* Add back isSameSite: false

* Upgrade beats_management plugin

* Update snapshot

* Fix InfraOps

* Upgrade kql_telemetry

* Merge upstream/master

* Upgrade apm and ml

* Put snapshot test back

* Fx beats

* Upgrade rollups

* Update boom usages in new plugins
2018-10-25 16:01:12 -05:00
Pete Harverson
e900879cc3
[ML] Fixes labels in datafeed time range selector modal (#24489) 2018-10-24 15:50:56 +01:00
James Gowdy
25d35fac27
[ML] Adds File Data Visualizer feature (#24423)
* [ML] File datavisualizer initial commit (#22828)

* [ML] File datavisualizer initial commit

* removing mocked data and adding initial stats

* adding card styling to fields

* Revert "". accidentally added with no commit message

This reverts commit d762d20b706e6a770e631f863b9e7d8879bb7ee6.

* adding date type to timestamp field

* renaming FileStats to FieldsStats

* code clean up

* changes based on review

* changes to error handling

* [ML] Adding file datavisualizer overrides (#23194)

* [ML] Adding file datavisualizer overrides

* improvements to overrides

* removing comment

* small refactor

* removing accidentally added file

* updates based on review

* fixing broken test

* adding missing grok pattern override

* fixing test

* [ML] Refactoring override option lists (#23424)

* [ML] Refactoring override option lists

* moving lists out of class

* updating test snapshot

* [ML] Fixing field editing (#23500)

* [ML] Changes to timestamp formats (#23498)

* [ML] Changes to timestamp formats

* updating test snapshot

* [ML] Allow Datavisualizer use on basic license (#23748)

* [ML] Allow ML use on basic license

* removing timeout change

* adding permission checks

* updating tests

* removing unnecessary checks

* [ML] Adds new page for choosing file or index based data visualizer (#23763)

* [ML] Adding license check to datavisualizer landing page (#23809)

* [ML] Adding license check to datavisualizer landing page

* removing comments

* updating redirect to landing page

* [ML] Adding ability to upload data to elasticsearch from datavisualizer  (#24042)

* [ML] Initial work for delimited file upload

* adding results links cards

* adding nav menu

* removing accidental debugger

* initial work for importing semi structured text

* using ingest pipeline for import

* adding json importer and better error reporting

* better progress steps

* time range added to results links

* first import only creates index and pipeline

* adding status constants

* using status constants

* adding explanation comment

* updating yarn.lock

* changes based on review

* fixing space

* fixing space again, stort it out git

* removing oversized background container causing constant scrollbar

* [ML] Adding basic license check when loading privileges (#24173)

* [ML] Adding basic license check

* missing import

* [ML] Adds an About panel to the file data visualizer landing page (#24260)

* [ML] Adds an About panel to the file data visualizer landing page

* [ML] Remove unnecessary style from file data visualizer scss

* [ML] Adding better error reporting for reading and importing data (#24269)

* [ML] Adding better error reporting for reading and importing data

* changes to endpoint errors

* displaying errors

* step logic refactor

* removing log statements

* [ML] Switch file data visualizer to use Papa Parse for CSV parsing (#24329)

* [ML] Fixes layout of Data Visualizer selector page for IE (#24387)

* [ML] Adding ability to override various settings when importing data (#24346)

* [ML] Adding ability to override various settings when importing data

* second commit with most of the outstanding code

* improving index pattern name validation

* better index pattern matching

* adding comments

* adding empty index pattern check

* changes based on review

* fixing test
2018-10-23 20:58:05 +01:00
Walter Rafelsberger
836b1a16d2
[ML] Fixes check for lower memory limit. (#24323)
- Fixes the job validation for the lower bound of the model memory limit. Previously the check was against zero, now it's again less than 1MB, which is the same as the backend expects.
- If the user entered model memory limit is less than half the value of the estimated model memory limit, a warning type message gets triggered. If the user entered model memory limit is more than half the value but less then the actual value of the estimated model memory limit, then the already existing info type message is shown. The unit tests have been updated to reflect that behavior.
2018-10-23 19:03:04 +02:00
Walter Rafelsberger
e59c1a11d6
[ML] Fixes job validation for nested time fields. (#24137)
This fixes an issue where job validation would return that a date field was invalid for nested date fields.
2018-10-17 17:33:29 +02:00
Pete Harverson
c272a1b7dd
[ML] Add links to rule editor for quick edit of value or filter (#22990)
* [ML] Add links to rule editor for quick edit of value or filter

* [ML] Updates to rule editor quick links following review
2018-09-13 15:54:11 +01:00
James Gowdy
12d15f6a47
[ML] Disabling single metric viewer links for non-applicable jobs (#22809)
* [ML] Disabling single metric viewer links for non-applicable jobs

* renaming variable

* renaming variable again
2018-09-07 16:35:51 +01:00
James Gowdy
23ed2135bf
[ML] Fixing issue with incorrect timezones in jobs list (#22714)
* [ML] Fixing issue with incorrect timezones in jobs list

* refactoring min and max calculation

* changes based on review

* changing TimeStamp to Timestamp
2018-09-05 17:16:13 +01:00
Walter Rafelsberger
3717654d6e
[ML] Fix bucket span estimation for machine learning admin user. (#21866)
This fixes bucket span estimation for the machine learning admin user when security is enabled. The original issue was that the machine learning admin by default doesn't have the necessary permissions to call cluster.getSettings to get the settings search.max_buckets. This is now fixed by using callWithInternalUser() and additional permissions checks.
2018-08-13 09:43:13 +02:00
James Gowdy
1de4523878
[ML] Adding group selector to jobs management (#21780)
* [ML] [WIP] Adding group selector to jobs management

* adding group name validation

* removing comment

* adding keyboard events

* moving new group input to its own component

* changes based on review

* adding tooltip

* adding better error reporting
2018-08-08 22:27:58 +01:00
James Gowdy
ae0f49658a
[ML] Fixing issue with historical job audit messages (#21718) 2018-08-07 14:11:08 +01:00
James Gowdy
149ff8ed17
[ML] Fixing crash in fields service when user has no index permission (#21469) 2018-07-31 14:08:43 +01:00
Lisa Cawley
2e54dacfa8
[ML] Updates URLs in job validation messages (#21361) 2018-07-30 08:04:09 -07:00
Walter Rafelsberger
3b6c9e3195
[ML] Improves bucket span estimator stability. (#21282)
- Fixes the bucket span estimator when median is selected as a detector function. agg.type.name is median and therefor not usable for an Elasticsearch aggregation. agg.type.dslName is percentile and is the correct mapping. .dslName is also used for the aggregations used for the preview charts.
- 7.0 will introduce a search.max_buckets setting which defaults to 10000. This could lead to failing bucket estimations because the values used for creating the required aggregations could result in more buckets. This PR fixes it by taking search.max_buckets into account when calculating the time range used for the bucket estimation. (Since 6.2 that setting is available so backporting this to current unreleased minor releases 6.4 and 6.5)
2018-07-27 10:43:59 +02:00
James Gowdy
60706bf77a
[ML] Better model memory limit validation (#21270) 2018-07-27 07:49:17 +01:00
Walter Rafelsberger
a121550791
[ML] Improved job validation messages. (#21191)
Improvements to job validation messages:
- Changed cardinality_over_field_low "might be less suitable" to "might not be suitable".
- Fixed documentation URLs.
- Extended categorization_filters_invalid message + documentation URL.
2018-07-26 16:32:44 +02:00