* kind of working solution... need to fix types.. would be great if all of this could go in the authorization class but I don't think we have access to the spaceids when we generate the kibana security action strings?
* update mapping type as array:true for space_ids field, fixes types, updates jest tests, adds integration tests
* undo changes in alerting authz class
* update snapshot for apm api integration test for rules writing alerts
* fix apm integration tests
* omit version and sequence from expected outcome
* re-add space id after this code was moved in master
* add another default space id to test
* fixes bug to remove duplicate spaceids
* add space ids filter to elasticsearch query, updates detection role
* update snapshot
* update type docs for alerts client
* remove dead code
* fix type error
* renames space ids field on alert documents from kibana.rac.alert.space_ids to kibana.space_ids
* fixes kb-rule-data-utils package
* update snapshots
* remove references to kibana.rac.alert.space_ids and replace with kibana.space_ids in rule registry integration tests and apm integration tests
* fix apm functional test snapshots
* undo index name changes I made in apm integration test configs
* update typedocs references to upstream, not local repo
* uptime - migrate to observability rules registry
* Modify Uptime alert types to work with server rule registry.
* Export `RuleType` type for consumption by client plugins.
* Add platinum as an option for `minimumLicenseRequired` field of `RuleTypeBase`.
* Simplify alert bootstrapping, inherit `RuleType` for alert factories.
* update rule field map
* adjust rule registery to be created within setup instead of mount
* adjust plugin setup to account for rule registry changes
* export types from rule registry
* move alert action message translations to common
* update rule field map
* update monitor status public alert model
* update tls public alert model
* update monitor status alert server model
* update tls alert sever model
* update server plugin file to scope alerts indices to synthetics
* add initContext to server Plugin class
* adjust public plugin to register alerts when core start is availabile
* update mappings
* update asset names
* adjust dependencies for alert initialization
* adjust duration anomaly server alert model
* adjust duration anomaly and monitor status public alert model to account for undefined types
* add duration_anomaly tests
* add anomaly severity
* adjust types
* update uptime server plugin
* remove test_helpers
* add getMonitorRouteFromMonitorId helper
* export AlertTypeWithExecutor from rule_registry
* adjust types
* mock time zone
* update types
* update types for legacy tls alert
* update mappings
* update monitor status check tls types
* update tls types and indexed fields
* update duration anomaly types and indexed fields
* update mappings
* delete unnecessary file
* adjust types
* adjust ruleDataClient initialization
* index anomaly bucket span
* update types
* adjust registration of legacy tls alert type
* adjust types
* update index alias name
* update anomaly detection rule mappings
* adjust import for certificate alert
* adjust rbac settings
* adjust content
* adjust uptime server plugin
Co-authored-by: Justin Kambic <justin.kambic@elastic.co>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Leave the environment out of the URL for the exploratory view when "All" is selected in the environment dropdown.
Move the analyze data button to its own component.
Add tests and stories for the the APM service template and analyze data button.
Fixes#105467.
* Fixes messed up form layout on custom interval form
* update storyshots
* Fix snapshot
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* [Sample data] Use Lens in flights sample data
* Fix test issues
* Fix functional tests
* Fix a11y test names
* Fix tests again
* Fix test
* Update from comments
* Fix sizing from feedback
* Fix typo
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* handle promise rejections
fixes elastic/security-team/issues/1407
* traverse array only once
* unskip test
* correctly mock activity log loading test
* review changes
:)
* unique ids only
* add comment to ignored line
review changes
* undo
* mock action_log api
* use mocked api
* mock endpoint meta data for tests
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* ✨ Unify escaping logic for csv export
* 📝 Update api doc
* ✅ Fix test with new escape logic
* 👌 First batch of feedback
* 💬 Fix typo
* 👌 Memoize function
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
## Summary
Some changes to the order & summaries in the OpenAPI docs.
* Removed `Fleet - ` and `EPM - ` text from the summaries. It saves space and I don't think the extra text helped the user
* Replaced `Enrollment` prefix with `Enrollment API Key`
* Used plural (`policies`, `agents`) for operations that return a list
* Rearranged the order of the routes to group the routes vs using an alphabetic sort.
* Not sure if it's priority/domain but it feels better to me
* `/setup` is the first route; not last.
* installing integrations and adding agents are "above the fold"
<details><summary>screenshots from one viewer - before (left) vs PR (right)</summary>
<img align="top" width="40%" alt="Screen Shot 2021-07-15 at 1 53 48 PM" src="https://user-images.githubusercontent.com/57655/125836353-1b3c10e2-6c1d-4a7a-99c7-04d49a37cbac.png"><img align="top" width="40%" alt="Screen Shot 2021-07-15 at 1 53 57 PM" src="https://user-images.githubusercontent.com/57655/125836358-6f0647c3-4209-43a3-8fc7-7b33ad97d543.png">
</details>
* Move swimlane annotation out of container, add new axis width prop
* [ML] Fix alignment if some annotations overflow
* [ML] Move utils function to inside anomaly_timeline_service
* [ML] Fix y chart overflow
* [ML] Enforce stricter check on isOverallSwimlaneData
* [ML] Update logic to check if only one label
* Convert enrichment icon from the security logo to an (i)
Feedback was that the security logo was confusing.
* Move tooltip icon to the right of our content
Placing it on the left was meant to call out these fields as distinct
from others, but placing it on the right is more in line with EUI
guidelines.
This also updates the relative spacing of these elements to account for
this new position.
* Allows header to span multiple lines if content would wrap
Without this, both the tooltip icon and the inspect button could be
hidden if the indicator matched a field with a particularly long value
(e.g. a file hash).
* Update copy with latest from product
I took a guess at extending the verbiage for some of the more detailed
descriptions, since product has not yet provided those.
* Final copy updates
Each panel now includes the CTI CTA as well.
* Improve schema from object to $ref
* Add description and response schema for /agent-status endpoint
* Remove code related to removed /install/:os endpoint
* Add response schemas for enrollment-api-key operations
* Add response schemas for /agents/:agentId
* Fix two security scheme names
* Change format for reference selectors
* Replace Ingest Manager with Fleet in OpenAPI spec
* Replace instances of Ingest Manager with Fleet
* Update instructions to create bundled specs
* Adds security-onboarding-and-lifecycle-mgt as a codeowner of /public/management and /server/endpoint/routes/trusted_apps
* Add more server folders that we own
* adds more sub paths and split our team from the security one using a comment line
* sort imports
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>