Commit graph

34751 commits

Author SHA1 Message Date
Thomas Watson fc5bc6b6a2
Add @elastic/safer-lodash-set as an alternative to lodash.set (#67452) 2020-07-15 10:29:57 +02:00
Tyler Smalley 42c3efdcab [tests] Temporarily skipped to promote snapshot
Will be re-enabled in #71727

Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-15 01:26:58 -07:00
Bohdan Tsymbala 4e6f0c60e2
Fixed the spacing of child accordion items for policy response dialog. (#71677) 2020-07-15 10:16:27 +02:00
Xavier Mouligneau 75582eb4ae
[SECURITY] Timeline bug 7.9 (#71748)
* remove delay of rendering row

* Fix flyout timeline to behave as we wanted

* Fix tabs on timeline page

* disable sensor visibility when you have less than 100 events in timeline

* Fix container to fit content and not take all the place that it wants

* do not update timeline time when switching top nav

* fix timeline url in case

* review I

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-15 08:51:31 +01:00
Mikhail Shustov 667b72f9e8
use fixed isChromeVisible method (#71813) 2020-07-15 09:35:24 +02:00
Frank Hassanabad 21156d6f18
[SIEM][Detection Engine][Lists] Adds specific endpoint_list REST API and API for abilities to auto-create the endpoint_list if it gets deleted (#71792)
* Adds specific endpoint_list REST API and API for abilities to autocreate the endpoint_list if it gets deleted

* Added the check against prepackaged list

* Updated to use LIST names

* Removed the namespace where it does not belong

* Updates per code review an extra space that was added

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-15 02:55:48 -04:00
Tyler Smalley ced455e077 [test] Skips flaky Saved Objects Management test
Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 23:49:27 -07:00
Søren Louv-Jansen f760d8513b
[APM] Remove watcher integration (#71655) 2020-07-15 08:42:17 +02:00
Søren Louv-Jansen 51a862988c
[APM] Increase xpack.apm.ui.transactionGroupBucketSize (#71661) 2020-07-15 08:41:57 +02:00
Tyler Smalley 6868ece766 [test] Skips Ingest Manager test preventing ES promotion
Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 23:40:35 -07:00
Tyler Smalley ddbfe53e22 [test] Skips flaky detection engine tests
https://github.com/elastic/kibana/issues/71814

Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 23:36:05 -07:00
Tyler Smalley 3c8a66e2b3 Revert "re-fix navigate path for master add SAML login to login_page (#71337)"
This reverts commit 1f340969ee.
2020-07-14 21:01:19 -07:00
Tyler Smalley 3984ffa135 [tests] Temporarily skipped Fleet tests
Most fleet tests are colliding with the change to timestamp_field ES
change

https://github.com/elastic/kibana/pull/71727

Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 19:54:32 -07:00
Tyler Smalley a8513256a0 [test] Skipped monitoring test
Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 19:43:44 -07:00
Ryland Herrick cbe8f00795
[Security Solution][Detections] Associate Endpoint Exceptions List to Rule during rule creation/update (#71794)
* Add checkbox to associate rule with global endpoint exception list

This works on creation, now we need edit.

* Fix DomNesting error on ML Card Description

EuiText generates a div, but this is inside of an EuiCard which is a
paragraph. Defines a span with equivalent styles, instead.

* Change default stack of alerts histogram to signal.rule.name
2020-07-14 21:27:57 -05:00
Marshall Main c5e39a24cd
Add endpoint exception creation API validation (#71791) 2020-07-14 22:25:10 -04:00
Ryland Herrick 73f5dec3db
Skip jest tests that timeout waiting for react (#71801) 2020-07-14 19:20:19 -07:00
Davis Plumlee 8a9988093e
[Security Solution][Exceptions] - Adds filtering to endpoint index patterns by exceptional fields (#71757) 2020-07-14 22:04:59 -04:00
Tim Sullivan 0d1c166a46
[Reporting] Re-delete a file (#71730)
...that was accidentally recovered due to incorrect manual merge
2020-07-14 19:01:31 -07:00
Devin W. Hurley 56de45d156
[Security Solution] [Detections] Fixes bug for determining when we hit max signals after filtering with lists (#71768)
update signal counter with filtered results, not with direct search results.
2020-07-14 21:27:44 -04:00
Nicolas Chaulet a885f8ac1e
[Ingest Manager] Better display of Fleet requirements (#71686) 2020-07-14 21:09:05 -04:00
Tyler Smalley 18dcd24fe9 [tests] Temporarily skipped to promote snapshot
Will be re-enabled in #71727

Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 17:59:00 -07:00
Pete Harverson e010ed3d09
[ML] Edits labelling of SIEM module and jobs from SIEM to Security (#71696)
## Summary

Edits all references to 'SIEM' in the ML SIEM modules to 'Security'. The following parts of the configurations were edited:
- Module titles
- Module descriptions
- Job descriptions
- `siem` job group changed to `security`

The `siem#/` portion of the custom URLs was also edited to `security/`.

Also removes the 'beta' label from module and job descriptions.

![image](https://user-images.githubusercontent.com/7405507/87452224-dbe4fd00-c5f8-11ea-887b-89c47e3467d2.png)

![image (26)](https://user-images.githubusercontent.com/7405507/87452265-edc6a000-c5f8-11ea-94a8-e101126666fa.png)


Part of #69319
2020-07-14 18:36:06 -06:00
Spencer a0f7dced13
[kbn/optimizer] report sizes of assets produced by optimizer (#71319)
* Revert "Report page load asset size (#66224)"

This reverts commit 6f57fa0b2d.

* [kbn/optimizer] report sizes of assets produced by optimizer

* coalese the fast-glob versions we're using to prevent additional installs

* update kbn/pm dist

* Revert "update kbn/pm dist"

This reverts commit 68e24f0fad.

* Revert "coalese the fast-glob versions we're using to prevent additional installs"

This reverts commit 4201fb60b6.

* remove fast-glob, just recursivly call readdirSync()

* update integration tests to use new chunk filename

Co-authored-by: spalger <spalger@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-14 17:23:14 -07:00
Wylie Conlon 58b4127b68
Unskip functional tests for feature controls (#71173)
* Unskip functional tests for feature controls

* Update Maps test

* Update test title

* Fix hidden case-sensitive issue in saved queries

* Fix test separation issues

* Improve saved query retry logic

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-14 20:13:44 -04:00
Thomas Neirynck de4d65cc75
[Maps] Remove .mvt feature flag (#71779)
The layer wizard to add 3rd party .mvt tiles now shows by default.
2020-07-14 19:41:13 -04:00
Tyler Smalley 86733f60ff [tests] Temporarily skipped to promote snapshot
Will be re-enabled in #71727

Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 16:02:49 -07:00
Brent Kimmel 654d4da904
[Security_Solution][Bug] Handle non-ecs categories in events (#71714)
* Make resolver related event categories permissive
2020-07-14 18:51:59 -04:00
Lee Drengenberg 1f340969ee
re-fix navigate path for master add SAML login to login_page (#71337) 2020-07-14 17:28:03 -05:00
spalger e318ea76dc fix triggered job name 2020-07-14 15:10:01 -07:00
spalger b1433e6317 remove unnecessary context reference from trigger job
(cherry picked from commit 817fdf9b439e85c3ddfda126b3efb4e45c36006b)
2020-07-14 15:08:29 -07:00
Devin W. Hurley e42630d1c5
[Security Solution] [DETECTIONS] Set rule status to failure only on large gaps (#71549)
* only display gap error when a gap is too large for the gap mitigation code to cover, general code cleanup, adds some tests for separate function

* removes throwing of errors and log error and return null for maxCatchup, ratio, and gapDiffInUnits properties

* forgot to delete commented out code

* remove math.abs since we fixed this bug by switching around logic when calculating gapDiffInUnits in getGapMaxCatchupRatio fn

* updates tests for when a gap error should be written to rule status

* fix typo
2020-07-14 18:08:20 -04:00
Nathan Reese 0e7c3c7ff0
[Maps] increase DEFAULT_MAX_BUCKETS_LIMIT to 65535 (#70313)
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-14 16:07:22 -06:00
spalger a81d8b55ab rename visual_baseline -> baseline_capture 2020-07-14 15:01:39 -07:00
Brian Seeders a5c9c4ec43 [CI] Add baseline trigger job 2020-07-14 15:01:32 -07:00
Luke Elmers 8ecbb25ab5
[expressions] AST Builder (#64395) 2020-07-14 15:57:22 -06:00
Chris Roberson 06b1820df7
[Monitoring] Out of the box alerting (#68805)
* First draft, not quite working but a good start

* More working

* Support configuring throttle

* Get the other alerts working too

* More

* Separate into individual files

* Menu support as well as better integration in existing UIs

* Red borders!

* New overview style, and renamed alert

* more visual updates

* Update cpu usage and improve settings configuration in UI

* Convert cluster health and license expiration alert to use legacy data model

* Remove most of the custom UI and use the flyout

* Add the actual alerts

* Remove more code

* Fix formatting

* Fix up some errors

* Remove unnecessary code

* Updates

* add more links here

* Fix up linkage

* Added nodes changed alert

* Most of the version mismatch working

* Add kibana mismatch

* UI tweaks

* Add timestamp

* Support actions in the enable api

* Move this around

* Better support for changing legacy alerts

* Add missing files

* Update alerts

* Enable alerts whenever any page is visited in SM

* Tweaks

* Use more practical default

* Remove the buggy renderer and ensure setup mode can show all alerts

* Updates

* Remove unnecessary code

* Remove some dead code

* Cleanup

* Fix snapshot

* Fixes

* Fixes

* Fix test

* Add alerts to kibana and logstash listing pages

* Fix test

* Add disable/mute options

* Tweaks

* Fix linting

* Fix i18n

* Adding a couple tests

* Fix localization

* Use http

* Ensure we properly handle when an alert is resolved

* Fix tests

* Hide legacy alerts if not the right license

* Design tweaks

* Fix tests

* PR feedback

* Moar tests

* Fix i18n

* Ensure we have a control over the messaging

* Fix translations

* Tweaks

* More localization

* Copy changes

* Type
2020-07-14 17:50:22 -04:00
Garrett Spong 8da80fe827
[Security] Adds field mapping support to rule creation Part II (#71402)
## Summary

Followup to https://github.com/elastic/kibana/pull/70288, which includes:

- [X] Rule Execution logic for:
  - [X] Severity Override
  - [X] Risk Score Override
  - [X] Rule Name Override
  - [X] Timestamp Override
- [X] Support for toggling display of Building Block Rules:
  - [X] Main Detections Page
  - [X] Rule Details Page
- [X] Integrates `AutocompleteField` for:
  - [X] Severity Override
  - [X] Risk Score Override
  - [X] Rule Name Override
  - [X] Timestamp Override
- [X] Fixes rehydration of `EditAboutStep` in `Edit Rule`
- [X] Fixes `Rule Details` Description rollup


Additional followup cleanup:
- [ ] Adds risk_score` to `risk_score_mapping`
- [ ] Improves field validation
- [ ] Disables override fields for ML Rules
- [ ] Orders `SeverityMapping` by `severity` on create/update
- [ ] Allow unbounded max-signals


### Checklist

Delete any items that are not applicable to this PR.

- [X] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)
- [ ] [Documentation](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#writing-documentation) was added for features that require explanation or tutorials
  - Syncing w/ @benskelker
- [X] [Unit or functional tests](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility) were updated or added to match the most common scenarios
### For maintainers

- [X] This was checked for breaking API changes and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
2020-07-14 15:39:26 -06:00
Christos Nasikas 754ade5130
[SIEM] Fix custom date time mapping bug (#70713)
Co-authored-by: Xavier Mouligneau <xavier.mouligneau@elastic.co>
Co-authored-by: Xavier Mouligneau <189600+XavierM@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-15 00:26:39 +03:00
Kaarina Tungseth 9506dc90ca
[DOCS] Adds ID to logstash pipeline (#71726) 2020-07-14 16:25:31 -05:00
Nathan Reese 34c54ed31b
[Maps] fix custom icon palettes UI not being displayed (#71482)
* [Maps] fix custom icon palettes UI not being displayed

* cleanup test

* remove uneeded change to vector style defaults

* fix jest tests

* review feedback

* fix jest tests
2020-07-14 15:19:51 -06:00
Kaarina Tungseth 0c87aa506d
[DOCS] Adds API keys to API docs (#71738)
* [DOCS] Adds API keys to API docs

* Fixes link title

* Update docs/api/using-api.asciidoc

Co-authored-by: Brandon Morelli <bmorelli25@gmail.com>

Co-authored-by: Brandon Morelli <bmorelli25@gmail.com>
2020-07-14 16:18:32 -05:00
Steph Milovic f5259ed373
[Security solution] [Hosts] Endpoint overview on host details page (#71466) 2020-07-14 15:18:17 -06:00
John Schulz 04cdb5ad6f
Use updated onPreAuth from Platform (#71552)
* Use updated onPreAuth from Platform

* Add config flag. Increase default value.

* Set max connections flag default to 0 (disabled)

* Don't use limiting logic on checkin route

* Confirm preAuth handler only added when max > 0

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2020-07-14 17:13:30 -04:00
Alison Goryachev 919e0f6263
[Index Management] Adopt data stream API changes (#71682) 2020-07-14 14:09:03 -07:00
Tyler Smalley e4546b3bf5 [tests] Temporarily skipped to promote snapshot
Will be re-enabled in https://github.com/elastic/kibana/pull/71727

Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
2020-07-14 14:04:14 -07:00
Kevin Logan 3f95b7a1f9
adjust query to include agents without endpoint as unenrolled (#71715) 2020-07-14 17:00:35 -04:00
Nicolas Chaulet c16bffc203
[Ingest Manager] Copy change enroll new agent -> Add Agent (#71691) 2020-07-14 16:49:00 -04:00
Tim Sullivan 820f9ede2d
[Reporting] Move a few server files for shorter paths (#71591) 2020-07-14 13:47:38 -07:00
Marta Bondyra cdbe12ff57
[Lens] XY chart -long legend overflows chart in editor Feature:Lens (#70702) 2020-07-14 22:41:58 +02:00