Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security Solution] Siem signals -> alerts as data field and index aliases #106049

Merged
merged 39 commits into from
Aug 5, 2021
Merged

[Security Solution] Siem signals -> alerts as data field and index aliases #106049

merged 39 commits into from
Aug 5, 2021

Commits on Jul 16, 2021

  1. Add aliases mapping signal fields to alerts as data fields

    @marshallmain
    marshallmain committed Jul 16, 2021
    Configuration menu
    Copy the full SHA
    010f093 View commit details
    Browse the repository at this point in the history

  2. Add aliases mapping alerts as data fields to signal fields

    @marshallmain
    marshallmain committed Jul 16, 2021
    Configuration menu
    Copy the full SHA
    c4edc7d View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2021

  1. Replace siem signals templates per space and add AAD index aliases to… 

    … siem signals indices
    @marshallmain
    marshallmain committed Jul 17, 2021
    Configuration menu
    Copy the full SHA
    f943313 View commit details
    Browse the repository at this point in the history

Commits on Jul 19, 2021

  1. Remove first version of new mapping json file

    @marshallmain
    marshallmain committed Jul 19, 2021
    Configuration menu
    Copy the full SHA
    5f11d31 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into signal-aad-aliases

    @marshallmain
    marshallmain committed Jul 19, 2021
    Configuration menu
    Copy the full SHA
    979ad9a View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2021

  1. Convert existing legacy siem-signals templates to new ES templates

    @marshallmain
    marshallmain committed Jul 26, 2021
    Configuration menu
    Copy the full SHA
    3148569 View commit details
    Browse the repository at this point in the history

  2. Catch 404 if siem signals templates were already updated

    @marshallmain
    marshallmain committed Jul 26, 2021
    Configuration menu
    Copy the full SHA
    3e08e73 View commit details
    Browse the repository at this point in the history

  3. Enhance error message when index exists but is not write index for alias

    @marshallmain
    marshallmain committed Jul 26, 2021
    Configuration menu
    Copy the full SHA
    58f7464 View commit details
    Browse the repository at this point in the history

  4. Merge branch 'master' into signal-aad-aliases

    @marshallmain
    marshallmain committed Jul 26, 2021
    Configuration menu
    Copy the full SHA
    1788952 View commit details
    Browse the repository at this point in the history

  5. Check if alias write index exists before creating new write index

    @marshallmain
    marshallmain committed Jul 26, 2021
    Configuration menu
    Copy the full SHA
    9377e0c View commit details
    Browse the repository at this point in the history

  6. More robust write target creation logic

    @marshallmain
    marshallmain committed Jul 26, 2021
    Configuration menu
    Copy the full SHA
    df9b010 View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2021

  1. Add RBAC required fields for AAD to siem signals indices

    @marshallmain
    marshallmain committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    bad2321 View commit details
    Browse the repository at this point in the history

Commits on Jul 28, 2021

  1. Fix index name in index mapping update

    @marshallmain
    marshallmain committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    b837f27 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into signal-aad-aliases

    @marshallmain
    marshallmain committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    94f9dee View commit details
    Browse the repository at this point in the history

  3. Throw errors if bulk retry fails or existing indices are not writeable

    @marshallmain
    marshallmain committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    28722b1 View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2021

  1. Add new template to routes even without experimental rule registry fl… 

    …ag enabled
    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    185f4ba View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into signal-aad-aliases

    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    bf89a05 View commit details
    Browse the repository at this point in the history

  3. Check template version before updating template

    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    30ac118 View commit details
    Browse the repository at this point in the history

  4. First pass at modifying routes to handle inserting field aliases

    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    3c6f7b7 View commit details
    Browse the repository at this point in the history

  5. Always insert field aliases when create_index_route is called

    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    3c26be4 View commit details
    Browse the repository at this point in the history

  6. Update snapshot test

    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    f1f5ddc View commit details
    Browse the repository at this point in the history

  7. Remove template update logic from plugin setup

    @marshallmain
    marshallmain committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    58d0e01 View commit details
    Browse the repository at this point in the history

Commits on Aug 2, 2021

  1. Use aliases_version field to detect if aliases need update

    @marshallmain
    marshallmain committed Aug 2, 2021
    Configuration menu
    Copy the full SHA
    e8f464c View commit details
    Browse the repository at this point in the history

  2. Fix bugs

    @marshallmain
    marshallmain committed Aug 2, 2021
    Configuration menu
    Copy the full SHA
    3054481 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'master' into signal-aad-aliases

    @kibanamachine
    kibanamachine committed Aug 2, 2021
    Configuration menu
    Copy the full SHA
    d7bc0da View commit details
    Browse the repository at this point in the history

  4. oops update snapshot

    @marshallmain
    marshallmain committed Aug 2, 2021
    Configuration menu
    Copy the full SHA
    0910131 View commit details
    Browse the repository at this point in the history

  5. Use internal user for PUT alias to fix perms issue

    @marshallmain
    marshallmain committed Aug 2, 2021
    Configuration menu
    Copy the full SHA
    3827188 View commit details
    Browse the repository at this point in the history

  6. Update comment

    @marshallmain
    marshallmain committed Aug 2, 2021
    Configuration menu
    Copy the full SHA
    0cd9b83 View commit details
    Browse the repository at this point in the history

Commits on Aug 3, 2021

  1. Disable new resource creation if ruleRegistryEnabled

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    5973dde View commit details
    Browse the repository at this point in the history

  2. Only attempt to add aliases if siem-signals index already exists

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    ded440e View commit details
    Browse the repository at this point in the history

  3. Merge branch 'master' into signal-aad-aliases

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    99d83ee View commit details
    Browse the repository at this point in the history

  4. Fix types, add aliases to aad indices, use package field names

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    8e7e00e View commit details
    Browse the repository at this point in the history

  5. Undo adding aliases to AAD indices

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    c033517 View commit details
    Browse the repository at this point in the history

  6. Remove unused import

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    fc475fd View commit details
    Browse the repository at this point in the history

  7. Update test and snapshot oops

    @marshallmain
    marshallmain committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    5828090 View commit details
    Browse the repository at this point in the history

Commits on Aug 4, 2021

  1. Filter out kibana.* fields from generated signals

    @marshallmain
    marshallmain committed Aug 4, 2021
    Configuration menu
    Copy the full SHA
    4275da7 View commit details
    Browse the repository at this point in the history

  2. Update cypress test to account for new fields in table

    @marshallmain
    marshallmain committed Aug 4, 2021
    Configuration menu
    Copy the full SHA
    0214b61 View commit details
    Browse the repository at this point in the history

  3. Properly handle space ids with dashes in them

    @marshallmain
    marshallmain committed Aug 4, 2021
    Configuration menu
    Copy the full SHA
    498f9c4 View commit details
    Browse the repository at this point in the history

Commits on Aug 5, 2021

  1. Merge branch 'master' into signal-aad-aliases

    @kibanamachine
    kibanamachine committed Aug 5, 2021
    Configuration menu
    Copy the full SHA
    6bcb6ae View commit details
    Browse the repository at this point in the history