kibana/x-pack/plugins/osquery
Madison Caldwell 5b0e283bcc
[Security Solution][Detections][Threshold Rules] Threshold multiple aggregations with cardinality (#90826)
* Remove unnecessary spreads

* Layout, round 1

* Revert "Layout, round 1"

This reverts commit b73b34acd5.

* Make threshold field an array

* Add cardinality fields

* Fix validation schema

* Query for multi-aggs

* Finish multi-agg aggregation

* Translate to multi-agg buckets

* Fix existing tests and add new test skeletons

* clean up

* Fix types

* Fix threshold_result data structure

* previous signals filter

* Fix previous signal detection

* Finish previous signal parsing

* tying up loose ends

* Fix timeline view for multi-agg threshold signals

* Fix build_bulk_body tests

* test fixes

* Add test for threshold bucket filters

* Address comments

* Fixing schema errors

* Remove unnecessary comment

* Fix tests

* Fix types

* linting

* linting

* Fixes

* Handle pre-7.12 threshold format in timeline view

* missing null check

* adding in follow-up pr

* Handle pre-7.12 filters

* unnecessary change

* Revert "unnecessary change"

This reverts commit 3edc7f2f2a.

* linting

* Fix rule schemas

* Fix tests

Co-authored-by: Marshall Main <marshall.main@elastic.co>
2021-02-17 23:07:26 -05:00
..
common [Security Solution][Detections][Threshold Rules] Threshold multiple aggregations with cardinality (#90826) 2021-02-17 23:07:26 -05:00
public
server Migrate most plugins to synchronous lifecycle (#89562) 2021-02-08 10:19:54 +01:00
jest.config.js
kibana.json [Asset Management] Migrate Osquery plugin to TS project references (#90916) 2021-02-10 17:48:42 +01:00
README.md
tsconfig.json TS config cleanup (#90492) 2021-02-11 12:34:25 -05:00

osquery

This plugin adds extended support to Security Solution Fleet Osquery integration


Development

See the kibana contributing guide for instructions setting up your development environment.