* Trying to flesh out new tree route
* Working on the descendants query
* Almost working descendants
* Possible solution for aggs
* Working aggregations extraction
* Working on the ancestry array for descendants
* Making changes to the unique id for ancestr
* Implementing ancestry funcitonality
* Deleting the multiple edges
* Fleshing out the descendants loop for levels
* Writing tests for ancestors and descendants
* Fixing type errors and writing more tests
* Renaming validation variable and deprecating old tree routes
* Renaming tree integration test file
* Adding some integration tests
* Fixing ancestry to handle multiple nodes in the request and writing more tests
* Adding more tests
* Renaming new tree to handler file
* Renaming new tree directory
* Adding more unit tests
* Using doc value fields and working on types
* Adding comments and more tests
* Fixing timestamp test issue
* Adding more comments
* Adding timerange and filters
* Updating schema
* Fixing timestamp test issue take 2
* Updating tests to use raw filter
* Adding time to generator
* Adding time filter and tests for retrieving lifecycles
* Removing min array size
* Updating the DAL
* Adding time range iso format
* Working on middleware
* Fleshing out middleware and actions
* Adding id, parent, and name fields to the top level response
* Adding logic for identifying when the view is moved
* WIP: updated data layers and selectors
* Switching to use isAnimating
* WIP: tree is displayed
* WIP: need events data for panel and fix tests
* Removing panning logic, adding comments and renaming things
* WIP: added name to graph
* Writing tests for the models
* Fixing generator start and end time generation
* Updating the mocks with the new interface
* Revert "Fixing generator start and end time generation"
This reverts commit c42ffd75c1.
* WIP: remove unnecessary front end data transformation
* Starting on loading state for nodes and details
* Find the terminated nodes in the middlewaree
* Fixing ingest tests
* Loading states seem to be working
* Removing some todos
* undo graphNodePositions naming
* Node loading state svg and pulse
* Fixing time range
* undo name changes, cleanup
* Creating mock that leverages the generator
* update tree generator
* log nested data in simulator.debugActions()
* change newResolverTree to resolverTree
* fix oneNodeWithPaginatedEvents mock and node events of type test
* Refactoring data reducer test and changing resolverTree DAL
* WIP: updating mocks
* remove deprecation tags
* Fixing the isometric tests
* Fixing process event tests
* updated resolver_tree mocks, update tests
* update additional tests
* fixing eslint
* fixing has more selectors
* update tests
* debugging click test
* Working node loading test
* Adding error cube and another test
* Adding a test for the error case
* use stored indices, update event api call for winlog, cleanup todos
* Adding more comments and restricting the analyze event to only endpoint and winlogbeat
* update to use schema provided by backend
* Fixing some type errors
* Fixing translation issue
* Fixing type errors
* Adding reload functionality
* Fixing translation issue
* Adding more tests for reload
* Cleaning comments up
* adding legend and schema info
* added legend and info popovers
* removed comment
* Adding comments and cleaning up stuff
* add schema and dataSource to mock actions
* Fixing some type errors and starting to address feedback
* Moving mock function
* Handling powershell events
* Adding test for winlogbeat schema
* remove cube loading className in favor of styledComponent
* fix closeAnalyzer jumping from middle of screen when resolver loads
* fix originID casing
* Cleaning up middleware and renaming time range
* Fixing node details test and some of the use selectors
* Fixing tests and types
* fix popover style, cube style, specific timestamp, some translations
* Fixed a test, and continuing to address feedback
* Addressing more feedback
* Refactoring the node data loading tests
* Adding selector for indices
* fix i18n, break apart graph controls, fix process event dot styles
* fix type error, styled description lists, nodeID
* style fix
* Removing unneeded test subjects
* recursion, recursion, recursion
* Calculating ancestors, descendants, generations once in factory and refactoring state
* Removing stringify replacer
* Adding default timerange to be beginning of epoch to max date in future
* refactoring winlog event query to use winlog record_id field
* fix popover toggle
* Fix type issue
* fix popover toggle
* add some tests
* fix types
* Adding link to time range comment
Co-authored-by: Michael Olorunnisola <michael.olorunnisola@elastic.co>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* Refactoring entity route to return schema
* Refactoring frontend middleware to pick off id field from entity route
* Refactoring schema and adding name and comments
* Adding name to schema mocks
* Fixing type issue
* Trying to flesh out new tree route
* Working on the descendants query
* Almost working descendants
* Possible solution for aggs
* Working aggregations extraction
* Working on the ancestry array for descendants
* Making changes to the unique id for ancestr
* Implementing ancestry funcitonality
* Deleting the multiple edges
* Fleshing out the descendants loop for levels
* Writing tests for ancestors and descendants
* Fixing type errors and writing more tests
* Renaming validation variable and deprecating old tree routes
* Renaming tree integration test file
* Adding some integration tests
* Fixing ancestry to handle multiple nodes in the request and writing more tests
* Adding more tests
* Renaming new tree to handler file
* Renaming new tree directory
* Adding more unit tests
* Using doc value fields and working on types
* Adding comments and more tests
* Fixing timestamp test issue
* Adding more comments
* Fixing timestamp test issue take 2
* Adding id, parent, and name fields to the top level response
* Fixing generator start and end time generation
* Adding more comments
* Revert "Fixing generator start and end time generation"
This reverts commit 9e9abf68a6.
* Adding test for time
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* Data stream fields being populated
* Adding some comments
* Switching data stream options to specific functions
* Removing unneeded import
* Refactoring based on Brent's feedback
* switch endpoint meta query to use agent.id
* update policy route to use agent ID
* update policy unit test, with schema change
* security front-end use agent.id as identifier
* update test to check the right field
* update SIEM to get endpoint data by agent.id
* fix type in test, but need to fix data, will still fail
* test: pull agent ID from esarchive data
* magnets, how do they work?
* cleanup
* apparently this test works differently now
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* Adding tests for dns pipeline in the endpoint package
* Adding test to make sure non dns events are ingested correctly
* Bring the docker container with the new endpoint package
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
* Match elastic/package-spec#24 `datasets`->`data_streams` property renaming
* Match elastic/package-spec#24 `datasets.name`->`data_streams.dataset` property renaming
* Match elastic/package-spec#24 `/dataset`->`/data_stream` directory renaming
* Match elastic/package-spec#50 `config_templates`->`policy_templates` property renaming
* Update API integration test fixtures (test packages)
* Temporarily skip API integration tests
* Temporarily skip more API integration tests
* Pin to custom docker image, unskip test suites, clean up broken icon paths in test package manifests
* Skip the only (yay!) failing test suite
* Revert "Skip the only (yay!) failing test suite"
This reverts commit 3db32e2528.
* Re-skip tests and revert docker image
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* 78024: move transform out of dataset
* Change index prefix
* 78024: fix tests, remove vestiges
* 78024: remove index defined in the transform when transform is removed.
* 78024: clean up
* 78024: fix build
* 78024: add comment
* 78024: remove test I added
* 78024: more removal, will add in next PR
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Creating new events route
* Trying to get github to recognize the indent change
* Using paginated name for events api return type
* Updating comment
* Updating comment
* Adding deprecated comments
* Adding more comments
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Final I hope check in for Resolver fix
* Fix click
* Fix click
* Fix click
* revert to select the first event
* Gzip Data file
* removed not zipped file
* striped Data file and gziped
* removed commented out delete indices
* Added query bar to select correct events
* removed commented out delete indices
* removed commented out delete indices
* removed commented out delete indices
* removed commented out delete indices
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Moving generator to safe type version
* Finished generator and alert
* Gzipping again
* Finishing type conversions for backend
* Trying to cast front end tests back to unsafe type for now
* Working reducer tests
* Adding more comments and fixing alert type
* Restoring resolver test data
* Updating snapshot with timestamp info
* Removing todo and fixing test
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* More comments
* Adding tests for mapping without entity_id
* Removing unnecessary comments
* Fixing type errors
* Removing unnecessary import
* Fixups and style
* change 'data' state shape, nesting the tree fetcher data
* rename 'TreeFetcherParameters' from 'DatabaseParameters' to make it
more specific to the API it works on
* fix bug in 'equal' method of 'TreeFetcherParameters'`
* use mockTreeFetcherParameters method in tests that need to specify a
TreeFetcherParameters but when the value isn't relevant to the test
* Hide Resolver if there is no databaseDocumentID
* add doc comments
* Fixing test name and adding comments
* Pulling in roberts test name changes
* [Resolver] Only render resolver once we have a signals index
Co-authored-by: oatkiller <robert.austin@elastic.co>
* Big bang commit removing top-level success property in API response
Left in check-permissions and in array of objects returned by delete package configs
* Remove success property from mocks
* Resolve conflict from upstream changes
* Remove success property (after upstream merge)
* Remove more 'success'es after merging in upstream
* Remove success from some tests
* Remove success from OpenAPI spec
* Revert prior try/catch. Use res.ok
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Adding kql filter
* Adding filter support for the backend and tests
* Moving the filter to the body
* switching events and alerts api to post
* Removing unused import
* Adding tests for events api results being in descending order
* Switching frontend to use post for related events
* Same behavior as now. Just refactored.
* main branch uses epr-snapshot. Others use prod
* Link some types vs repeating them
* replace DEFAULT_REGISTRY_URL with getRegistryUrl in Endpoint tests
* Make an Endpoint test helper name more clear
* try/catch around getKibanaBranch
* Use branch & version from package.json as fallback
* No guards b/c kibana{Branch,Version} have defaults
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Adding tests for endpoint package pipelines
* Removing content type check on types that can change based on docker image version
* Skipping ingest tests instead of remove expect
* Switching ingest tests over to use application/json
* Removing country names
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Handling entity ids of empty string
* Tests for entity id being empty
* More comments
* entity test
* Renaming interface
* Removing unneeded test
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Manifest version is semantic version
* Configurable task interval
* Use task interval over scheduled when provided
* Fix crash on download of large artifact
* Don't need to generate linux artifacts
* Configurable artifact validation
* Test fixes
* Test fixes
* Type/test fixes
* Final tweaks
* Remove linux endpoint exception generation from UI
* Fix paging so that we stop before 10k
* Fix pagination
* Fix pagination test
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
* Copying api integration tests into their own directory
* Removing api integration tests and using ingest docker image
* Fixing typo
* Fixing type errors and empty string and reenabling tests
* Rebuilding docs
* Renaming url override variable
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>