No description
Find a file
Madison Caldwell 5b0e283bcc
[Security Solution][Detections][Threshold Rules] Threshold multiple aggregations with cardinality (#90826)
* Remove unnecessary spreads

* Layout, round 1

* Revert "Layout, round 1"

This reverts commit b73b34acd5.

* Make threshold field an array

* Add cardinality fields

* Fix validation schema

* Query for multi-aggs

* Finish multi-agg aggregation

* Translate to multi-agg buckets

* Fix existing tests and add new test skeletons

* clean up

* Fix types

* Fix threshold_result data structure

* previous signals filter

* Fix previous signal detection

* Finish previous signal parsing

* tying up loose ends

* Fix timeline view for multi-agg threshold signals

* Fix build_bulk_body tests

* test fixes

* Add test for threshold bucket filters

* Address comments

* Fixing schema errors

* Remove unnecessary comment

* Fix tests

* Fix types

* linting

* linting

* Fixes

* Handle pre-7.12 threshold format in timeline view

* missing null check

* adding in follow-up pr

* Handle pre-7.12 filters

* unnecessary change

* Revert "unnecessary change"

This reverts commit 3edc7f2f2a.

* linting

* Fix rule schemas

* Fix tests

Co-authored-by: Marshall Main <marshall.main@elastic.co>
2021-02-17 23:07:26 -05:00
.ci [coverage] change worker, save json files in original path (#91683) 2021-02-17 19:45:06 +01:00
.github [Uptime] increase flaky alert retry time (#91455) 2021-02-16 18:53:33 +01:00
config
dev_docs
docs [ML] Transforms: Adds missing bucket checkbox to group by popover form. (#91650) 2021-02-18 01:54:39 +01:00
examples
licenses
packages Unify Kibana & Elasticsearch logging config keys (#90764) 2021-02-16 20:27:25 +01:00
plugins
rfcs
scripts
src [ML] Transforms: Adds missing bucket checkbox to group by popover form. (#91650) 2021-02-18 01:54:39 +01:00
tasks/config
test [coverage] change worker, save json files in original path (#91683) 2021-02-17 19:45:06 +01:00
typings Elastic License 2.0 (#90099) 2021-02-03 18:12:39 -08:00
utilities
vars [coverage] fix jest merging (#90915) 2021-02-16 18:02:56 +01:00
x-pack [Security Solution][Detections][Threshold Rules] Threshold multiple aggregations with cardinality (#90826) 2021-02-17 23:07:26 -05:00
.backportrc.json Enable auto-merge for backports (#91626) 2021-02-17 18:05:27 +01:00
.bazelignore
.bazeliskversion
.bazelrc
.bazelrc.common
.bazelversion
.browserslistrc
.editorconfig
.eslintignore
.eslintrc.js
.fossa.yml
.gitattributes
.gitignore [APM] Fix optimize-tsconfig script (#91487) 2021-02-17 09:06:23 +01:00
.i18nrc.json
.node-version
.npmrc
.nvmrc
.prettierignore
.prettierrc
.stylelintignore
.stylelintrc
.telemetryrc.json
.yarnrc
api-documenter.json
BUILD.bazel
CONTRIBUTING.md
FAQ.md
github_checks_reporter.json
Gruntfile.js
Jenkinsfile [CI] Increase pipeline timeouts (#91587) 2021-02-16 15:23:06 -08:00
jest.config.integration.js
jest.config.js
kibana.d.ts
LICENSE.txt
NOTICE.txt
package.json Update backport to 5.6.6 (#91703) 2021-02-17 23:15:16 +01:00
preinstall_check.js
README.md
renovate.json5 [renovate] disable pr limits since we only enable for limited packages 2021-02-17 10:56:57 -07:00
SECURITY.md
STYLEGUIDE.md
tsconfig.base.json
tsconfig.browser.json
tsconfig.json
tsconfig.refs.json Migrate logstash, monitoring, url_drilldowns, xpack_legacy to ts projects (#91194) 2021-02-17 04:50:56 -05:00
tsconfig.types.json
TYPESCRIPT.md
WORKSPACE.bazel
yarn.lock Update backport to 5.6.6 (#91703) 2021-02-17 23:15:16 +01:00

Kibana

Kibana is your window into the Elastic Stack. Specifically, it's a browser-based analytics and search dashboard for Elasticsearch.

Getting Started

If you just want to try Kibana out, check out the Elastic Stack Getting Started Page to give it a whirl.

If you're interested in diving a bit deeper and getting a taste of Kibana's capabilities, head over to the Kibana Getting Started Page.

Using a Kibana Release

If you want to use a Kibana release in production, give it a test run, or just play around:

Building and Running Kibana, and/or Contributing Code

You might want to build Kibana locally to contribute some code, test out the latest features, or try out an open PR:

Documentation

Visit Elastic.co for the full Kibana documentation.

For information about building the documentation, see the README in elastic/docs.

Version Compatibility with Elasticsearch

Ideally, you should be running Elasticsearch and Kibana with matching version numbers. If your Elasticsearch has an older version number or a newer major number than Kibana, then Kibana will fail to run. If Elasticsearch has a newer minor or patch number than Kibana, then the Kibana Server will log a warning.

Note: The version numbers below are only examples, meant to illustrate the relationships between different types of version numbers.

Situation Example Kibana version Example ES version Outcome
Versions are the same. 5.1.2 5.1.2 💚 OK
ES patch number is newer. 5.1.2 5.1.5 ⚠️ Logged warning
ES minor number is newer. 5.1.2 5.5.0 ⚠️ Logged warning
ES major number is newer. 5.1.2 6.0.0 🚫 Fatal error
ES patch number is older. 5.1.2 5.1.0 ⚠️ Logged warning
ES minor number is older. 5.1.2 5.0.0 🚫 Fatal error
ES major number is older. 5.1.2 4.0.0 🚫 Fatal error

Questions? Problems? Suggestions?

  • If you've found a bug or want to request a feature, please create a GitHub Issue. Please check to make sure someone else hasn't already created an issue for the same topic.
  • Need help using Kibana? Ask away on our Kibana Discuss Forum and a fellow community member or Elastic engineer will be glad to help you out.