kibana/x-pack/test/detection_engine_api_integration
Frank Hassanabad 827442b4b0
[Security Solution][Detection Engine] Test cases for alias failure test cases where we don't copy aliases correctly (#101437)
## Summary

Test cases for signals and aliases, including a failure of where we do not copy alias data at the moment even if the target is an ECS compatible field.

For example with this mapping:

```json
{
  "dynamic": "strict",
  "properties": {
    "@timestamp": {
      "type": "date"
    },
    "host": {
      "properties": {
        "name": {
          "type": "alias",
          "path": "host_alias.name"
        }
      }
    },
    "host_alias": {
      "properties": {
        "name": {
          "type": "keyword"
        }
      }
    }
  }
}
```

If we detect this as a signal hit we should be copying over both:
* `host_alias.name` -> `host.name`
* `host_alias.name` -> `host_alias.name`

to the target signal index, but we only copy:
* `host_alias.name` -> `host_alias.name`

### Checklist

- [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios
2021-06-04 22:34:52 -04:00
..
basic
common [kbn/test] move types/ftr into src (#99555) 2021-05-17 09:51:53 -07:00
security_and_spaces [Security Solution][Detection Engine] Test cases for alias failure test cases where we don't copy aliases correctly (#101437) 2021-06-04 22:34:52 -04:00
utils.ts [Security Solution] Utilizes constants package and deletes duplicate code (#100513) 2021-05-24 18:38:14 -06:00