Commit graph

34206 commits

Author SHA1 Message Date
Garrett Spong
e19b0b0262
[Platform][Security] Updates cluster_manager ignorePaths to include security scripts (#70139)
## Summary

Updates the cluster_manager `ignorePaths` to include security related script directories so that the server doesn't restart when modifying scripts like below... 🙂 

<p align="center">
  <img width="600" src="https://user-images.githubusercontent.com/2946766/85908688-4dd4de00-b7d3-11ea-9e64-38729a5cb63f.png" />
</p>
2020-06-29 18:07:17 -06:00
Nicolas Chaulet
88a41b2b1e
[IngestManager] Allow to filter agent by packages (#69731) 2020-06-29 18:48:18 -04:00
Dmitry Lemeshko
8e524477bc
[code coverage] exclude folders: test_helpers, tests_bundle (#70199) 2020-06-29 23:55:29 +02:00
Phillip Burch
470397075f
[Metrics UI] UX improvements for saved views (#69910)
* Works-ish

* Load the default view without throwing error

* Design feedback

* Update Saved Views design on Metrics explorer

* Fix types

* UX improvements when saving and editng

* Only load default view if there is no state from anywhere else.

* Add loading indicator and other polish

* Hide saved view menu when opening modals

* Fix typecheck

* Fix typo

* Fix translations
2020-06-29 16:53:36 -05:00
Brandon Morelli
3f44757973
[APM] docs: unique transaction troubleshooting (#69831)
* docs: draft

* docs: finishing touches
2020-06-29 14:51:38 -07:00
Rashmi Kulkarni
d79a6883bf
Cross cluster search functional test with minimun privileges assigned to the test_user (#70007)
* using test_user with limited read permission to search profiler test

* gitcheck

* search profiler test using test_user

* using limited roles and privileges for CCR

* changed the global ccr role kibana section to be consistent with other roles with no feature controls

* removed canvas role

* changes to include pagination for 100 rows

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 14:42:49 -07:00
Nathan Reese
917598141f
[Maps] choropleth layer wizard (#69699)
* [Maps] choropleth layer wizard

* add boundaries radio group

* geo_index_pattern_select

* consolidate more logic into geo_index_pattern_select

* small clean-up

* left geo field and join field

* move EuiPanel into render wizard

* cleanup

* right panel

* createEmsChoroplethLayerDescriptor

* createEsChoroplethLayerDescriptor

* i18n cleanup

* tslint

* snapshot update

* review feedback

* review feedback

* update snapshot

* make EMS default source

* tslint

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 15:12:09 -06:00
John Schulz
7db95a1691
Make custom errors by extending Error (#69966)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 17:08:50 -04:00
Jen Huang
d9fcc585cf
[Ingest Manager] Support updated package output structure (#69864)
* Update EPM package registry typings to reflect registry changes

* Change `dataset.id` references to `dataset.name`

* Fix RegistryStream

* Fix packageToConfigDatasourceInputs service

* Fix assignPackageStream service

* Fix validateDatasource service

* Fix configure data source components

* Fix variable

* Fix stream template installation

* Add support for `input[].dataset.type` and change `stream.dataset` mapping to be object containing `name` with instead of just a string

* Nest package information under `meta` in agent config yaml

* Move `dataset.type` to stream level instead of input level

* Make single call to fetch registry package information instead of doing it per stream

* Fix type issues

* Update endpoint test assertion

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 14:06:05 -07:00
Robert Austin
ad9d3dcb9c
Resolver test coverage (#70246)
* Move AABB, Matrix3, and Vector2 modules from lib to models

* Add tests for AABB

* remove dead code
2020-06-29 17:04:29 -04:00
Lee Drengenberg
752fa6e01e
Async Discover search test (#64388)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 15:40:02 -05:00
Spencer
9c965fef72
[ui-shared-deps] include styled-components (#69322)
* [ui-shared-deps] include styled-components

* update snapshots caused by react-is upgrade

* fix jest snapshots

* declare react-is dep in x-pack too so it uses the right version

Co-authored-by: spalger <spalger@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 13:06:14 -07:00
nnamdifrankie
f196546f4b
SECURITY-ENDPOINT: add host properties (#70238) 2020-06-29 16:03:02 -04:00
MadameSheema
04991d40c2
[SIEM] Fixes 'sets and reads the url state for timeline by id' Cypress test (#69882)
* fixes 'sets and reads the url state for timeline by id' test

* fixes merge issue

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 21:20:54 +02:00
Shahzad
df44a3e779
[RUM Dashboard] Chart breakdowns (#69420)
Co-authored-by: Casper Hübertz <casper@formgeist.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 20:54:52 +02:00
Luke Elmers
6a69e19226
[data.search.aggs] Remove date histogram dependency on timefilter (#69858) 2020-06-29 12:52:13 -06:00
Wylie Conlon
736e64c60f
[Lens] Fix cross cluster bug and optimize existence query (#70132)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 13:47:08 -04:00
MadameSheema
c2944855bd
renames 'detections' to 'alerts' (#70164) 2020-06-29 19:29:37 +02:00
Brandon Morelli
7de74f04e9
docs: update alerting (#69839) 2020-06-29 10:29:03 -07:00
MadameSheema
2a25df3f1c
[SIEM] Fixes Cypress 'Search Bar' test (#69952)
* fixes 'Search Bar' test

* [DEBUG] executes only Security Cypress tests

* Revert "[DEBUG] executes only Security Cypress tests"

This reverts commit e727790dbf.

* [DEBUG] executes only Security Cypress tests

* [DEBUG] fixes jenkins file

* [DEBUG] fixes Jenkinsfile

* Revert "[DEBUG] fixes Jenkinsfile"

This reverts commit 8f42e82edd.

* Revert "[DEBUG] fixes jenkins file"

This reverts commit 98487467eb.

* Revert "[DEBUG] executes only Security Cypress tests"

This reverts commit 6a089305e1.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 19:28:46 +02:00
Robert Austin
8ffdd4568b
[Security Solution] Resolver in Timeline (#69728)
Display Resolver in Security Solution's Timeline.
2020-06-29 13:10:39 -04:00
Gidi Meir Morris
d3a0ab3db0
fixed eslint for alerting (#70171)
Fixed eslint in the alerting project
2020-06-29 18:00:58 +01:00
Joel Griffith
c53f036f5d
Ensure that security is enabled before doing user authentication checks (#70127)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 09:26:11 -07:00
Mikhail Shustov
4fe60c4a0d
fix config update for root context (#70168)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 18:13:00 +02:00
Luke Elmers
851e7ff9b8
[data.search.aggs] Remove fieldFormats from AggConfig & AggConfigs (#69762) 2020-06-29 10:10:34 -06:00
Brian Seeders
462bf1520f skip flaky suite (#69617) 2020-06-29 11:48:39 -04:00
Vadim Dalecky
9f6ad5a8d8
"Explore underlying data" in-chart action kibana.yml flag (#70045)
* refactor: 💡 rename folder to "explore_data"

* style: 💄 check for "share" plugin in more semantic way

"explore data" actions use Discover URL generator, which is registered
in "share" plugin, which is optional plugin, so we check for its
existance, because otherwise URL generator is not available.

* refactor: 💡 move KibanaURL to a separate file

* feat: 🎸 add "Explore underlying data" in-chart action

* fix: 🐛 fix imports after refactor

* feat: 🎸 add start.filtersFromContext to embeddable plugin

* feat: 🎸 add type checkers to data plugin

* feat: 🎸 better handle empty filters in Discover URL generator

* feat: 🎸 implement .getUrl() method of explore data in-chart act

* feat: 🎸 add embeddable.filtersAndTimeRangeFromContext()

* feat: 🎸 improve getUrl() method of explore data action

* test: 💍 update test mock

* fix possible stale hashHistory.location in discover

* style: 💄 ensureHashHistoryLocation -> syncHistoryLocations

* docs: ✏️ update autogenerated docs

* test: 💍 add in-chart "Explore underlying data" unit tests

* test: 💍 add in-chart "Explore underlying data" functional tests

* test: 💍 clean-up custom time range after panel action tests

* chore: 🤖 fix embeddable plugin mocks

* chore: 🤖 fix another mock

* test: 💍 add support for new action to pie chart service

* feat: 🎸 add kibana.yml to disable in-chart "explore data" actio

Co-authored-by: Anton Dosov <anton.dosov@elastic.co>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 17:47:08 +02:00
Larry Gregory
28b70923df
Consolidate capabilities check for Stack Management (#69437)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 11:43:43 -04:00
Pierre Gayvallet
fe1c508d8d
Move and rename legacy elasticsearch client (#69797)
* move last snapshot to inline

* move legacy files to legacy subfolder

* move request types out of legacy

* export Headers from http instead of elasticsearch

* renaming - first pass

* renaming - second pass

* fix core mocks

* adapt new calls

* update generated doc

* fix IT test mocks

* fix new usages
2020-06-29 17:43:31 +02:00
Nathan Reese
3347c8b9df
remove no longer required div wrapper around ValidatedDualRange (#70188)
* remove no longer required div wrapper around ValidatedDualRange

* tslint
2020-06-29 09:37:16 -06:00
spalger
848c239bff disable page load metrics task in baseline job too 2020-06-29 08:34:44 -07:00
patrykkopycinski
821aa9903b
Bump react-router (#69608) 2020-06-29 16:55:38 +02:00
Nicolas Chaulet
6e9972e693
[Ingest Manager] expose method to get agent and list agents to other plugins (#70087) 2020-06-29 10:51:30 -04:00
Corey Robertson
f47b3e50c7
[Canvas] Update Canvas Plugin documentation (#65910)
* Update Canvas Plugin documentation

* Small fix

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

* Update x-pack/plugins/canvas/README.md

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>

Co-authored-by: Clint Andrew Hall <clint@clintandrewhall.com>
2020-06-29 10:39:49 -04:00
Daniil Suleiman
19bda1fcee
Reactify visualize app (#67848)
* Reactify visualize app

* Fix typescript failures after merging master

* Make sure refresh button works

* Subscribe filter manager fetches

* Use redirect to landing page

* Update savedSearch type

* Add check for TSVB is loaded

* Fix comments

* Fix uiState persistence on vis load

* Remove extra div around TableListView

* Update DTS selectors

* Add error handling for embeddable

* Remove extra argument from useEditorUpdates effect

* Update comments, fix typos

* Remove extra div wrapper

* Apply design suggestions

* Revert accidental config changes

* Apply navigating to dashboard

* Apply redirect legacy urls

* Apply incoming changes

* Apply incoming changes

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 17:21:49 +03:00
Dario Gieselaar
dbdc3cd01a
[APM] Run API tests as restricted user (#70050) 2020-06-29 16:17:32 +02:00
Sandra Gonzales
81022a3206
[Ingest Manager] rollover data stream when index template mappings are not compatible (#69180)
* rollover data stream when index template mappings are not compatible

* update error messages

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 10:01:59 -04:00
Shahzad
64e87cd6b5
[Uptime] Use ML Capabilities API to determine license type (#66921)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 15:36:59 +02:00
Sonja Krause-Harder
e91594aeb9
[Ingest Manager] Use DockerServers service in integration tests. (#69822)
* Partially disable test files.

* Use DockerServers in EPM tests.

* Only run tests when DockerServers have been set up

* Reenable ingest manager API integration tests

* Pass new test_packages to registry container

* Enable DockerServers tests in CI.

* Correctly serve filetest package for file tests.

* Add helper to skip test and log warning.

* Reenable further file tests.

* Add developer documentation about Docker in Kibana CI.

* Document use of yarn test:ftr

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-29 15:24:11 +02:00
Nathan L Smith
8e57db696a
[APM] Use licensing from context (#70118)
* [APM] Use licensing from context

We added the usage of `featureUsage.notifyUsage` from the licensing plugin in #69455.

This required us to use `getStartServices to add `licensing` to `context.plugins`.

In #69838 `featureUsage` was added to `context.licensing`, so we don't need to add it to `context.plugins`.
2020-06-29 08:23:52 -05:00
Pierre Gayvallet
7e5cff4be9
[GS] add application result provider (#68488)
* add application result provider

* remove empty contracts & cache searchable apps

* fix types
2020-06-29 15:17:00 +02:00
Alison Goryachev
3571100bcc
[CCR] Fix reducer function when finding missing privileges (#70158) 2020-06-29 08:31:59 -04:00
Wylie Conlon
40ff82d779
[Lens] Fix broken test (#70117) 2020-06-27 08:20:29 +02:00
Angela Chuang
f4e7f14ffe
[SIEM] Import timeline fix (#65448)
* fix import timeline and clean up

fix unit tests

apply failure checker

clean up error message

fix update template

* add unit tests

* clean up common libs

* rename variables

* add unit tests

* fix types

* Fix imports

* rename file

* poc

* fix unit test

* review

* cleanup fallback values

* cleanup

* check if title exists

* fix unit test

* add unit test

* lint error

* put the flag for disableTemplate into common

* add immutiable

* fix unit

* check templateTimelineVersion only when update via import

* update template timeline via import with response

* add template filter

* add filter count

* add filter numbers

* rename

* enable pin events and note under active status

* disable comment and pinnedEvents for template timelines

* add timelineType for openTimeline

* enable note icon for template

* add timeline type for propertyLeft

* fix types

* duplicate elastic template

* update schema

* fix status check

* fix import

* add templateTimelineType

* disable note for immutable timeline

* fix unit

* fix error message

* fix update

* fix types

* rollback change

* rollback change

* fix create template timeline

* add i18n for error message

* fix unit test

* fix wording and disable delete btn for immutable timeline

* fix unit test provider

* fix types

* fix toaster

* fix notes and pins

* add i18n

* fix selected items

* set disableTemplateto true

* move templateInfo to helper

* review + imporvement

* fix review

* fix types

* fix types

Co-authored-by: Patryk Kopycinski <contact@patrykkopycinski.com>
Co-authored-by: Xavier Mouligneau <189600+XavierM@users.noreply.github.com>
2020-06-27 04:53:53 +01:00
Candace Park
684289d6e3
[SECURITY SOLUTION][INGEST] UX update for ingest manager edit/create datasource for endpoint (#70079)
[security solution][ingest]UX update for ingest manager edit/create datasource for endpoint
2020-06-26 20:25:01 -04:00
Ahmad Bamieh
266f853b0b
[Telemetry] Collector Schema (#64942)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-27 02:52:26 +03:00
Kevin Logan
5236335d63
[Endpoint] Add Endpoint empty states for onboarding (#69626) 2020-06-26 18:08:07 -04:00
Michael Olorunnisola
5c8df21ca0
Hide unused resolver buttons (#70112)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-06-26 17:38:02 -04:00
Andrew Goldstein
295ac7ef12
[Security] Investigate in Resolver Timeline Integration (#70111)
## [Security] `Investigate in Resolver` Timeline Integration

This PR adds a new `Investigate in Resolver` action to the Timeline, and all timeline-based views, including:

- Timeline
- Alert list (i.e. Signals)
- Hosts > Events
- Hosts > External alerts
- Network > External alerts

![investigate-in-resolver-action](https://user-images.githubusercontent.com/4459398/85886173-c40d1c80-b7a2-11ea-8011-0221fef95d51.png)

### Resolver Overlay

When the `Investigate in Resolver` action is clicked, Resolver is displayed in an overlay over the events. The screenshot below has placeholder text where Resolver will be rendered:

![resolver-overlay](https://user-images.githubusercontent.com/4459398/85886309-10f0f300-b7a3-11ea-95cb-0117207e4890.png)

The Resolver overlay is closed by clicking the `< Back to events` button shown in the screenshot above.

The state of the timeline is restored when the overlay is closed. The scroll position (within the events), any expanded events, etc, will appear exactly as they were before the Resolver overlay was displayed.

### Case Integration

Users may link directly to a Timeline Resolver view from cases via the `Attach to new case` and `Attach to existing case...` actions show in the screenshot below:

![case-integration](https://user-images.githubusercontent.com/4459398/85886773-e3587980-b7a3-11ea-87b6-b098ea14bc5f.png)

![investigate-in-resolver](https://user-images.githubusercontent.com/4459398/85885618-daff3f00-b7a1-11ea-9356-2e8a1291f213.gif)

When users click the link in a case, Timeline will automatically open to the Resolver view in the link.

### URL State

Users can directly share Resolver views (in saved Timelines) with other users by copying the Kibana URL to the clipboard when Resolver is open.

When another user pastes the URL in their browser, Timeline will automatically open and display the Resolver view in the URL.

### Enabling the `Investigate in Resolver` action

In this PR, the `Investigate in Resolver` action is only enabled for events where all of the following are true:

- `agent.type` is `endpoint`
- `process.entity_id` exists

### Context passed to Resolver

The only context passed to `Resolver` is the `_id` of the event (when the user clicks `Investigate in Resolver`)

### What's next?

- @oatkiller will replace the placeholder text shown in the screenshots above with the actual call to Resolver in a separate PR
- I will follow-up this PR with additional tests
- The action text `Investigate in Resolver` may be changed in a future PR
- Hide the `Add to case` action in timeline-based views (it's currently visible, but disabled)
2020-06-26 15:36:51 -06:00
Andrea Del Rio
59925daff5
[Discover] Improve styling of graphs in sidebar (#69440) 2020-06-26 13:21:51 -07:00