kibana/x-pack/plugins/lists/server/scripts
Frank Hassanabad cb934344d3
[Security Solutions][Detection Engine] Critical bug where value lists were not operational (#80368)
## Summary

Fixes bugs to allow users to use value based lists manually. This isn't a first class citizen of the UI at the moment but you can manually add them to the existing UI as long as it's a single index and does not mix ECS threat lists with item lists.

Example is upload a list in the file `hosts.txt` and a type of `keyword`:

<img width="808" alt="Screen Shot 2020-10-13 at 9 50 58 AM" src="https://user-images.githubusercontent.com/1151048/95893319-0a33bf00-0d45-11eb-9c67-81fe9495d802.png">

Then add it as a threat mapping using:
* Index of `.items-${space_id}` such as `.items-default`
* Use the mapping field of "keyword"
* Use the query of `list_id: ${file_name}` such as `list_id : "hosts.txt"` 

<img width="808" alt="Screen Shot 2020-10-13 at 9 50 58 AM" src="https://user-images.githubusercontent.com/1151048/95893884-8af2bb00-0d45-11eb-9a38-97aef6e1a754.png">

<img width="1065" alt="Screen Shot 2020-10-13 at 11 08 40 AM" src="https://user-images.githubusercontent.com/1151048/95893902-92b25f80-0d45-11eb-84a0-5cf60e8ba0bf.png">


### Checklist

Delete any items that are not applicable to this PR.

- [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios
2020-10-14 15:33:52 -06:00
..
exception_lists [Security Solution][Exceptions] Add lowercase normalizer for case-insensitivity + deprecate _tags field (new OS field) (#77379) 2020-10-02 15:54:43 -04:00
lists [Security Solutions][Detection Engine] Critical bug where value lists were not operational (#80368) 2020-10-14 15:33:52 -06:00
check_env_variables.sh
delete_all_exception_lists.sh
delete_endpoint_list_item.sh
delete_endpoint_list_item_by_id.sh
delete_exception_list.sh
delete_exception_list_by_id.sh
delete_exception_list_item.sh
delete_exception_list_item_by_id.sh
delete_list.sh
delete_list_index.sh
delete_list_item_by_id.sh
delete_list_item_by_value.sh
download_load_lists_example.sh
export_list_items.sh
export_list_items_to_file.sh
find_endpoint_list_items.sh
find_exception_list_items.sh
find_exception_list_items_by_filter.sh
find_exception_lists.sh
find_exception_lists_by_filter.sh
find_list_items.sh
find_list_items_with_cursor.sh
find_list_items_with_sort.sh
find_list_items_with_sort_cursor.sh
find_lists.sh
find_lists_with_cursor.sh
find_lists_with_filter.sh
find_lists_with_sort.sh
find_lists_with_sort_cursor.sh
get_endpoint_list_item.sh
get_endpoint_list_item_by_id.sh
get_exception_list.sh
get_exception_list_by_id.sh
get_exception_list_item.sh
get_exception_list_item_by_id.sh
get_list.sh
get_list_item_by_id.sh
get_list_item_by_value.sh
get_privileges.sh
hard_reset.sh
import_list_items.sh
import_list_items_by_filename.sh
lists_index_exists.sh
patch_list.sh
patch_list_item.sh
post_endpoint_list.sh
post_endpoint_list_item.sh
post_exception_list.sh
post_exception_list_item.sh
post_list.sh
post_list_index.sh
post_list_item.sh
post_x_exception_list_items.sh
quick_start.sh
update_endpoint_item.sh
update_exception_list.sh
update_exception_list_item.sh
update_list.sh
update_list_item.sh