Commit graph

30097 commits

Author SHA1 Message Date
Matthew Kime c1ccb304b6
Management API - redirect on disabled app path (#55136)
* redirect on disabled management app path
2020-01-17 17:57:24 -06:00
Frank Hassanabad 6cfd1d48b3
[SIEM][Detection Engine] Fixes critical regression on the backend with immutable and tags
## Summary

Fixes regression with immutable caused from:
https://github.com/elastic/kibana/pull/55004

* Updated types of Prepackaged 
* Updated unit tests
* Fixed unit test for it

Testing:

```
./post_rule.sh 
{
  "created_at": "2020-01-17T19:11:31.813Z",
  "updated_at": "2020-01-17T19:11:31.813Z",
  "created_by": "elastic_kibana",
  "description": "Query with a rule_id that acts like an external id",
  "enabled": true,
  "false_positives": [],
  "from": "now-6m",
  "id": "41ef6309-ef98-4c9f-8d2d-90a070361fb7",
  "immutable": false,
  "interval": "5m",
  "rule_id": "query-rule-id",
  "language": "kuery",
  "output_index": ".siem-signals-frank-hassanabad-default",
  "max_signals": 100,
  "risk_score": 1,
  "name": "Query with a rule id",
  "query": "user.name: root or user.name: admin",
  "references": [],
  "severity": "high",
  "updated_by": "elastic_kibana",
  "tags": [],
  "to": "now",
  "type": "query",
  "threats": [],
  "version": 1
}
```

Then get the saved object using whatever the id is comes back from above. In this example it is 41ef6309-ef98-4c9f-8d2d-90a070361fb7, yours will be different

```
./get_saved_objects.sh alert 41ef6309-ef98-4c9f-8d2d-90a070361fb7
{
  "id": "41ef6309-ef98-4c9f-8d2d-90a070361fb7",
  "type": "alert",
  "updated_at": "2020-01-17T19:11:32.844Z",
  "version": "WzY5NTQsMV0=",
  "attributes": {
    "name": "Query with a rule id",
    "tags": [
      "__internal_rule_id:query-rule-id",
      "__internal_immutable:false"
    ],
    "alertTypeId": "siem.signals",
    "consumer": "siem",
    "params": {
      "createdAt": "2020-01-17T19:11:31.813Z",
      "description": "Query with a rule_id that acts like an external id",
      "ruleId": "query-rule-id",
      "index": null,
      "falsePositives": [],
      "from": "now-6m",
      "immutable": false,
      "query": "user.name: root or user.name: admin",
      "language": "kuery",
      "outputIndex": ".siem-signals-frank-hassanabad-default",
      "savedId": null,
      "timelineId": null,
      "timelineTitle": null,
      "meta": null,
      "filters": null,
      "maxSignals": 100,
      "riskScore": 1,
      "severity": "high",
      "threats": [],
      "to": "now",
      "type": "query",
      "updatedAt": "2020-01-17T19:11:31.813Z",
      "references": [],
      "version": 1
    },
    "schedule": {
      "interval": "5m"
    },
    "enabled": true,
    "actions": [],
    "throttle": null,
    "apiKeyOwner": "elastic_kibana",
    "createdBy": "elastic_kibana",
    "updatedBy": "elastic_kibana",
    "createdAt": "2020-01-17T19:11:32.245Z",
    "muteAll": false,
    "mutedInstanceIds": [],
    "scheduledTaskId": "2c5cc340-395d-11ea-9276-d3c1c264ca9a"
  },
  "references": []
}
```

Ensure you have the internal immutable of "__internal_immutable:false" In your tags


Next test is to do a find filter of non-packaged rules:

```
./find_rule_by_filter.sh "alert.attributes.tags:%20%22__internal_immutable:false%22"
```

You should get back the above rule any others you created.

### Checklist

Use ~~strikethroughs~~ to remove checklist items you don't feel are applicable to this PR.

~~- [ ] This was checked for cross-browser compatibility, [including a check against IE11](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility)~~

~~- [ ] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)~~

~~- [ ] [Documentation](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#writing-documentation) was added for features that require explanation or tutorials~~

- [x] [Unit or functional tests](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility) were updated or added to match the most common scenarios

~~- [ ] This was checked for [keyboard-only and screenreader accessibility](https://developer.mozilla.org/en-US/docs/Learn/Tools_and_testing/Cross_browser_testing/Accessibility#Accessibility_testing_checklist)~~

### For maintainers

~~- [ ] This was checked for breaking API changes and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)~~

- [x] This includes a feature addition or change that requires a release note and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
2020-01-17 16:53:04 -07:00
Shahzad 81bcaed7ae
update local (#55177) 2020-01-18 00:24:34 +01:00
Ryland Herrick 27103bd4a5
[SIEM] Fix mocks for kibana context (#54996)
* Use our internal uiSettings mock in all context mocks

We were previously only using our internal uiSettings mock (which
returns real values) in our TestProviders component, as
all tests either needed:

* specific mocks, in which case we'd call jest.mock() ourselves
* broad mocks, for which platform's kibana_react mocks were usually
sufficient

However, a recent addition in the Timeline component added a usage of
uiSettings that could not use the default mock.

With this change, one can either jest.mock('lib/kibana') or use the
TestProviders wrapper to get real values for UI settings in test.

* Remove production code guarding against tests

This coalescence was due to the service not being properly mocked in
test, which is now fixed.
2020-01-17 16:28:38 -06:00
Josh Dover 92c4604b5d
Remove kibana-platform pr-project-assigner (#55244) 2020-01-17 15:10:33 -07:00
Mike Côté 66e2c720fd
Re-enable mute all test now that API is no longer flaky (#55172) 2020-01-17 16:26:09 -05:00
Kaarina Tungseth 4dd31a50ef
[DOCS] Added to Add a field column definition (#55116) 2020-01-17 15:13:22 -06:00
Joel Griffith e8b859bf2f
[Reporting] Fix map tiles not loading by using Chrome's Remote Protocol (#55137)
* WIP Fixing map tiles and such

* Small comment and importing map from dolash

* Better destructuring and comments

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-17 12:18:24 -08:00
Alexey Antonov 801302e3ce
[Data Plugin] combine autocomplete provider and suggestions provider (#54451)
* [Data Plugin] combine autocomplete provider and suggestions provider

Closes: #52843

* [Data Plugin] combine autocomplete provider and suggestions provider - add skeleton for SuggestionsProvider

* autocomplete_provider -> autocomplete

* value_suggestions.ts - change getSuggestions method

* remove suggestions_provider folder

* fix PR comments

* fix PR comments

* fix CI

* fix CI

* getFieldSuggestions -> getValueSuggestions

* update Jest snaphots

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-17 22:42:51 +03:00
Peter Schretlen 2234210369
resolves #53038 - remove references to specific license levels (#53858) 2020-01-17 14:41:55 -05:00
Jean-Louis Leysens a1fe536f6d highlighting rules should still know about url parts when in sql state (#55200) 2020-01-17 11:04:30 -08:00
Tre' Seymour 867c4df24d Merge branch 'master' of github.com:elastic/kibana 2020-01-17 11:41:07 -07:00
Nick Partridge 119eabe271
[Metric] convert mocha tests to jest (#54054)
* Add fixtures/* alias to tsconfig and jest config
* Convert metric tests to jest
* Convert remaining js files to ts
2020-01-17 12:00:35 -06:00
Nathan Reese 56482ab043
[skip-ci] Update vector styling docs for 7.6 UI changes and new features (#55087)
* Quantitative data driven styling

* quantitative styling

* clean up

* clean up

* review feedback
2020-01-17 12:34:40 -05:00
Tre' Seymour a5d7201728 Merge branch 'master' of github.com:elastic/kibana 2020-01-17 09:38:09 -07:00
Mike Côté 9c2d778d1c
Fix enable API to schedule task after alert is updated (#55095) 2020-01-17 10:48:48 -05:00
Tiago Costa 5af378a2fb
chore(NA): add 7.6 branch to the list of backport branches (#54998) 2020-01-17 14:52:23 +00:00
Daniil Suleiman b9161e7682
Convert tests to jest in vis_type_timeseries/public & common folders (#55023)
* Convert tests to jest in vis_type_timeseries/public & common folders

* Remove unused translation
2020-01-17 17:04:00 +03:00
Pete Harverson d740ec34b3
[ML] Accessibility fix for structural markup on table rows (#55075)
* [ML] Accessibility fix for structural markup on table rows

* [ML] Fix type error on Transforms table cell for scope property
2020-01-17 13:48:31 +00:00
Alison Goryachev 102bd2bcda
[Mappings editor] include/exclude fields only support custom options (#54949) 2020-01-17 08:22:17 -05:00
Maryia Lapata 9e07a427c7
[Vis] Move Timelion Vis to vis_type_timelion (#52069)
* Deangularize timelion vis

* Refactoring

* Fix path

* Update timelion_controller.ts

* Remove unused deps

* Create vis_type_timelion

* Create ChartComponent

* Render chart in react

* Reactify timelion editor

* Change translation ids

* Use hooks

* Add @types/pegjs into renovate.json5

* Add validation, add hover suggestions

* Style fixes

* Change plugin setup, use kibana context

* Update

* Fix ticks

* Fix plotselected listener

* Fix plothover handler

* Add TS for options

* Update TS

* Restructuring

* Change plugin start

* Remove vis from timelion plugin

* Rename class

* Mock services

* Fix other comments

* Remove duplicate files

* Convert test to jest

* Remove kibana_services from timelion

* Delete visualize_app.ts.~LOCAL

* Refactoring

* Fix TS

* Refactoring, TS

* Import eui variables

* Import styling constants

* Move react components to vis_type_timelion

* Fix TS

* Move ui imports to legacy_imports.ts

* Move chain.peg to vis_type_timelion

* Fix path

* Use KibanaContext instead kibana_services.ts

* Refactoring

* Refactoring

* Add @types/flot

* Fix issue with hovered series color

* Update renovate.json5

* Pass timelionPanels as dependencies

* Move common folder to vis_type_timelion

* Move back tick_formatters.ts

* Rename styles file

* Refactoring

* Update _index.scss

* Move to_milliseconds to common

* Revert yaxes formatting

* Refactoring

* Refactoring

* Use Panel directly

* Refactoring of to_milliseconds.ts

Co-authored-by: Daniil Suleiman <31325372+sulemanof@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-17 15:30:26 +03:00
Pierre Gayvallet 856c85b400
Deprecate chrome.navlinks.update and add documentation (#54893)
* add migration example on application status updater

* update example with proper licensing plugin usage

* fix line width
2020-01-17 13:27:09 +01:00
Walter Rafelsberger f13adfab5b
[ML] Single Metric Viewer: Fix time bounds with custom strings. (#55045)
Makes sure to set bounds via timefilter.getBounds() again and not infer directly from globalState to correctly consider custom strings like now-15m.
2020-01-17 13:16:02 +01:00
Daniil Suleiman 3e46060854
[Vis: Default editor] EUIficate and Reactify the sidebar (#49864)
* EUIficate the sidebar

* Create a state reducer and a state context

* Create an editor context and actions

* Improve types

* Apply aggs reordering

* Fix functionality

* Improve types

* Fix sub_agg changes

* Remove legacy dependencies

* Watch dirty state

* Fix dirty state changes

* Update actions and reducers

* Handle keyboard submit

* Apply editor form validation

* Remove fancy forms

* Update validation

* Use embeddable instead of visualize loader

* Add auto apply behavior

* Remove legacy styles

* Remove the sidebar

* Restrict responsive to the bottom_bar

* Upgrade @elastic/eui to v14.10.0

* Replace EuiBottomBar with EuiControlBar

* Get rid of mutations in control vis

* Revert "Upgrade @elastic/eui to v14.10.0"

This reverts commit 2cd86c51d2.

* Replace bottom bar with a control panel for sidebar

* Replace selectors

* Use editor resizer

* Apply selectors

* Change selectors

* Fix sub agg change values

* Add collapse button

* Fix tests

* Get rid of editor editor_state_context, simplify the code

* Fix jest tests, update snapshots

* Fix types

* Moving collapse button to right of index pattern

* Tweaks bottom buttons

* Moved Vega buttons so they don’t scroll away

* Fix responsiveness

* Resolve UI comments

* Fix console resizer

* Update dev docs

* Bail out of additional render in metrics and axes

* Apply performance optimizations for metrics and axis panel

* Remove unused translations

* Use debounce when autoapply enabled

Co-authored-by: Caroline Horn <549577+cchaos@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-17 14:01:44 +03:00
Sébastien Loix 92b5f78f4f
[Mappings editor] Fix cannot set boolean value for "null_value" param (#55015) 2020-01-17 12:33:31 +05:30
Garrett Spong 24df3a92e1
[SIEM] Adds support for apm-* to the network map (#54876)
## Summary

Resolves https://github.com/elastic/kibana/issues/52297, https://github.com/elastic/kibana/issues/52565

To improve the display of APM data within SIEM (specifically the `HTTP Table` and `Network Map`), this PR adds `apm-*-transcation*` to `siem:defaultIndex`, and additional support for showing `client`/`server` layers on the `Network Map` when a matching `apm-*` index pattern is present.

The map now supports pattern matching when checking for available Kibana Index Patterns, and so matches `apm-*-transcation*` -> `apm-*` (if exists). Additionally, the map config was updated to generate layers for client/server geo fields (instead of the usual source/dest) since these are the fields Transactions use.

![image](https://user-images.githubusercontent.com/2946766/72573225-2a038880-3882-11ea-9590-a545d726dbf9.png)

<img width="1214" alt="Screen Shot 2020-01-14 at 18 22 11" src="https://user-images.githubusercontent.com/2946766/72407120-bcd5e300-371b-11ea-90cc-a0714320a59c.png">


### Checklist

Use ~~strikethroughs~~ to remove checklist items you don't feel are applicable to this PR.

- [ ] ~This was checked for cross-browser compatibility, [including a check against IE11](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility)~
- [X] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)
- [ ] [Documentation](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#writing-documentation) was added for features that require explanation or tutorials
  - Will work with @benskelker on updating the maps docs
- [X] [Unit or functional tests](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility) were updated or added to match the most common scenarios
- [ ] ~This was checked for [keyboard-only and screenreader accessibility](https://developer.mozilla.org/en-US/docs/Learn/Tools_and_testing/Cross_browser_testing/Accessibility#Accessibility_testing_checklist)~

### For maintainers

- [ ] ~This was checked for breaking API changes and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)~
- [ ] ~This includes a feature addition or change that requires a release note and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)~
2020-01-16 17:13:39 -07:00
Tim Sullivan cfbd095841
[Reporting] Define shims of legacy dependencies (#54082)
* simplify serverfacade definition

* simplify requestfacade definition

* use the shim

* makeRequestFacade

* requestFacade

* import sorting

* originalServer

* reduce loc change

* remove consolelog

* hacks to fix tests

* ServerFacade in index

* Cosmetic

* remove field from serverfacade

* add raw to the request

* fix types

* add fieldFormatServiceFactory to legacy

* Pass the complete request object to sec plugin

* Fix test

* fix test 2

* getUser takes a legacy request

* add unit test for new lib

* add getRawRequest to pass to saved objects method

* update test snapshot

* leave a TODO comment for type import

* variable rename for legacy id

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-16 15:15:25 -07:00
Robert Austin 13afdb9a6f
Resolver is overflow: hidden to prevent obscured elements from showing up (#55076) 2020-01-16 17:09:53 -05:00
Chandler Prall 94209a8a39
Upgraded EUI to 18.2.1 (#55090) 2020-01-16 15:03:40 -07:00
Thomas Neirynck 2b873a740f
[Maps] Support styles on agg fields with _of_ in name (#54965) 2020-01-16 16:59:13 -05:00
Aaron Caldwell 83b0062836
Remove xpack_main requirement, it's no longer in use (#55060) 2020-01-16 14:44:18 -07:00
John Dorlus dde9e9b7b0
Fix Snapshots Policies Alignment Issue in IE11 (#54866)
* Removed flex group because it's causing alignment issues on IE. Verified and tested on all 3 browsers.

* Restored <EuiFlexItem> but added grow=false to properly align icons.
2020-01-16 16:33:12 -05:00
The SpaceCake Project bc69d6e604
first rule cuts (#54990)
* rule cuts

first pass at rule cuts, 21 deelted rule files, no adds, no changes.

* Update index.ts

* index regen

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-16 15:49:26 -05:00
Kaarina Tungseth 89e79aa422
[DOCS] Adds geocentroid note to coordinate map (#54389)
* [DOCS] Added note to coordinate map for geocentroid

* Minor changes

* Comments from Gail
2020-01-16 13:32:35 -06:00
Corey Robertson 78ec55e6fa
[Canvas] Fixes the Copy Post Url link (#54831)
* Fixes the Copy Post Url link

* Adds tests

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-16 14:31:20 -05:00
Corey Robertson ece414e423
Fixes bugs with full screen filters (#54792)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-16 14:14:02 -05:00
Dima Arnautov a922e1f5ae
[ML] Fix decoding in the URL state (#54915)
* [ML] condition for rison decode in getUrlState

* [ML] fix icon alignment

* [ML] use Set

* [ML] add export, fix typo

* [ML] setUrlState test

* [ML] fields stats width
2020-01-16 19:33:08 +01:00
Aleh Zasypkin 41316bac31
Remove redundant x-pack/typings. (#55042) 2020-01-16 18:45:39 +01:00
Frank Hassanabad 178c7a48fc
[SIEM][Detection Engine] Adds critical missing status route to prepackaged rules
## Summary

* Fixes a critical bug where the missing status for the REST route was missing
* Fixes a bug with the 400 not being used for the missing index in some cases
* Changes create and update to NO LONGER allow immutable to be passed
* Fixes a bug with the add prepackaged schema to where you could use `immutable: false`. Now it is required to be missing or set to `immutable: true` within it. 
* Cleans up unit tests

To use the critical bug missing status for the REST route:

```ts
GET /api/detection_engine/rules/prepackaged/_status 
```

And you will get back:

```ts
{
  "rules_installed": 252,
  "rules_not_installed": 87,
  "rules_not_updated": 0
}
```

See the script:

```ts
get_prepackaged_rules_status.sh
```

for more details

### Checklist

Use ~~strikethroughs~~ to remove checklist items you don't feel are applicable to this PR.

~~- [ ] This was checked for cross-browser compatibility, [including a check against IE11](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility)~~

~~- [ ] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)~~

~~- [ ] [Documentation](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#writing-documentation) was added for features that require explanation or tutorials~~

- [x] [Unit or functional tests](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility) were updated or added to match the most common scenarios

~~- [ ] This was checked for [keyboard-only and screenreader accessibility](https://developer.mozilla.org/en-US/docs/Learn/Tools_and_testing/Cross_browser_testing/Accessibility#Accessibility_testing_checklist)~~

### For maintainers

~~- [ ] This was checked for breaking API changes and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)~~

- [x] This includes a feature addition or change that requires a release note and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
2020-01-16 10:37:22 -07:00
Eli Perelman 7977f0edd4
Generate legacy vars when rendering all applications (#54768)
* Generate legacy vars when rendering all applications

* Move rendering functional tests and add user settings tests

* Make rendering integration tests more robust, get data from page

* Address review nits, fix CI failures

* Remove extraneous file

* Fix type error
2020-01-16 11:35:21 -06:00
Melissa Alvarez 8ce07c23bd
[ML] DataFrame Analytics: filter out docs with no prediction data from results table (#54826)
* filter out docs with no prediction data from results table

* ensure bool.must exists in the cloned searchQuery

* create must in bool query if not present
2020-01-16 12:34:33 -05:00
Marcin Tojek 2c4d58bc7a
Add Kibana tutorial for IBM MQ metrics (#54900)
* Add Kibana tutorial for IBM MQ metrics

* Change IBM MQ logo

* Logo minified

* Add screenshot
2020-01-16 18:18:09 +01:00
Liza Katz 12ec08e8ab
export new ui settings types and regen docs (#55020)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-01-16 19:02:23 +02:00
Alison Goryachev 46568c2213
[Mappings editor] Clean up dynamic_templates code (#54950) 2020-01-16 11:53:43 -05:00
Thomas Neirynck ca91ec55b4
[Maps] Rename geo_tile display points option to clusters (#54973) 2020-01-16 11:47:20 -05:00
Paul Tavares 93a11838ad
[Endpoint] add Redux saga Middleware and app Store (#53906)
* Added saga library
* Initialize endpoint app redux store
2020-01-16 11:34:32 -05:00
Josh Dover 54c7d340ae
Renable navigation back test (#54825) 2020-01-16 09:10:22 -07:00
Alison Goryachev 6658412bad
[Mappings editor] Add missing period to load JSON copy (#54959) 2020-01-16 10:38:54 -05:00
Melissa Alvarez b9814bfb76
[ML] DF Analytics Outlier detection results: improve handling of text fields (#55002)
* add keyword suffix to fieldName when both text and keyword

* update exploration jest test
2020-01-16 10:32:27 -05:00
Nathan L Smith e60289f611
[APM] Storybook support (#54970)
Add Storybook with help from changes in #43529.

    We still need to do some work around having mocks for hooks and HTTP requests but the basics are there.
2020-01-16 09:27:07 -06:00