Commit graph

15 commits

Author SHA1 Message Date
IgorG
4f0edbd160
Functional Test for Resolver fix (#77116)
* Final I hope check in for Resolver fix

* Fix click

* Fix click

* Fix click

* revert to select the first event

* Gzip Data file

* removed not zipped file

* striped Data file and gziped

* removed commented out delete indices

* Added query bar to select correct events

* removed commented out delete indices

* removed commented out delete indices

* removed commented out delete indices

* removed commented out delete indices

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-09-16 13:16:20 -07:00
Jonathan Buttner
e7b02d06cc
[Security Solution] Use safe type in resolver backend (#76969)
* Moving generator to safe type version

* Finished generator and alert

* Gzipping again

* Finishing type conversions for backend

* Trying to cast front end tests back to unsafe type for now

* Working reducer tests

* Adding more comments and fixing alert type

* Restoring resolver test data

* Updating snapshot with timestamp info

* Removing todo and fixing test

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-09-10 14:26:35 -04:00
nnamdifrankie
2ed4b57776
[SecuritySolution-Ingest]: use new metadata current and add transform installation (#74394)
[SecuritySolution-Ingest]: use new metadata current and add transform installation
2020-09-08 17:56:38 -04:00
Jonathan Buttner
ae093e5a7a
[Security Solution] Resolver retrieve entity id of documents without field mapped (#76562)
* More comments

* Adding tests for mapping without entity_id

* Removing unnecessary comments

* Fixing type errors

* Removing unnecessary import

* Fixups and style

* change 'data' state shape, nesting the tree fetcher data
* rename 'TreeFetcherParameters' from 'DatabaseParameters' to make it
more specific to the API it works on
* fix bug in 'equal' method of 'TreeFetcherParameters'`
* use mockTreeFetcherParameters method in tests that need to specify a
TreeFetcherParameters but when the value isn't relevant to the test
* Hide Resolver if there is no databaseDocumentID
* add doc comments

* Fixing test name and adding comments

* Pulling in roberts test name changes

* [Resolver] Only render resolver once we have a signals index

Co-authored-by: oatkiller <robert.austin@elastic.co>
2020-09-04 09:24:24 -04:00
John Schulz
71b9dedfc4
[Ingest Manager] Remove success: true as top-level API response (#73223)
* Big bang commit removing top-level success property in API response

Left in check-permissions and in array of objects returned by delete package configs

* Remove success property from  mocks

* Resolve conflict from upstream changes

* Remove success property (after upstream merge)

* Remove more 'success'es after merging in upstream

* Remove success from some tests

* Remove success from OpenAPI spec

* Revert prior try/catch. Use res.ok

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-09-02 12:07:32 -04:00
Jonathan Buttner
4042f82035
[Security Solution][Resolver] Support kuery filter (#74695)
* Adding kql filter

* Adding filter support for the backend and tests

* Moving the filter to the body

* switching events and alerts api to post

* Removing unused import

* Adding tests for events api results being in descending order

* Switching frontend to use post for related events
2020-08-26 09:25:45 -04:00
Jonathan Buttner
7fd2c2bed2
[Security Solution] Resolver children pagination (#74603)
* Handle info and change events for children

* Adding sequence

* Fixing children pagination

* Fixing tests

* Adding docs
2020-08-10 11:54:22 -04:00
Jonathan Buttner
2dea17a8d0
Using msearch for tree api endpoint (#73813) 2020-08-04 12:54:20 -04:00
Jonathan Buttner
64126b425e
[Security Solution][Resolver] Handle info and change events for children (#74007)
* Handle info and change events for children

* Disabling tests for children search_after

* Addressing comments
2020-08-03 20:01:11 -04:00
Dan Panzarella
b9e5ae9c77
[Security Solution] Filter endpoint hosts by agent status (#71882) 2020-08-03 11:53:52 -04:00
John Schulz
9c9080c11e
[Ingest Management] main branch uses epr-snapshot. Others production (#73555)
* Same behavior as now. Just refactored.

* main branch uses epr-snapshot. Others use prod

* Link some types vs repeating them

* replace DEFAULT_REGISTRY_URL with getRegistryUrl in Endpoint tests

* Make an Endpoint test helper name more clear

* try/catch around getKibanaBranch

* Use branch & version from package.json as fallback

* No guards b/c kibana{Branch,Version} have defaults

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-30 19:15:26 -04:00
Jonathan Buttner
70d4eac30c
[Security Solution] Adding tests for endpoint package pipelines (#73703)
* Adding tests for endpoint package pipelines

* Removing content type check on types that can change based on docker image version

* Skipping ingest tests instead of remove expect

* Switching ingest tests over to use application/json

* Removing country names

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-30 14:43:33 -04:00
Jonathan Buttner
41c2967e08
[Security Solution][Resolver] Handle disabled process collection (#73592)
* Handling entity ids of empty string

* Tests for entity id being empty

* More comments

* entity test

* Renaming interface

* Removing unneeded test

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-29 00:01:33 -04:00
Madison Caldwell
5a04909819
[Security Solution][Exceptions] Use semantic version for manifest version + Scaling Tweaks (#73388)
* Manifest version is semantic version

* Configurable task interval

* Use task interval over scheduled when provided

* Fix crash on download of large artifact

* Don't need to generate linux artifacts

* Configurable artifact validation

* Test fixes

* Test fixes

* Type/test fixes

* Final tweaks

* Remove linux endpoint exception generation from UI

* Fix paging so that we stop before 10k

* Fix pagination

* Fix pagination test

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-28 22:43:40 -04:00
Jonathan Buttner
867a672c7a
[Security Solution] Use docker for endpoint tests (#73092)
* Copying api integration tests into their own directory

* Removing api integration tests and using ingest docker image

* Fixing typo

* Fixing type errors and empty string and reenabling tests

* Rebuilding docs

* Renaming url override variable

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-27 14:13:50 -04:00