Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution] Bugfix for inspect index pattern not aligned with data view index pattern #125007

Merged
merged 5 commits into from
Feb 9, 2022

Conversation

stephmilovic
Copy link
Contributor

Summary

Resolves Issue #121377

Some widgets in the security app do not match the sourcerer data view pattern. Add messaging where this happens:
Screen Shot 2022-02-08 at 9 26 46 AM

When logs-* is included in the sourcerer selection, we append an exclude for Elastic cloud logs. Add messaging explaining that:
Screen Shot 2022-02-08 at 10 08 37 AM

Checklist

Delete any items that are not applicable to this PR.

@stephmilovic stephmilovic added v8.0.0 release_note:skip Skip the PR/issue when compiling release notes Team:Threat Hunting Security Solution Threat Hunting Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. auto-backport Deprecated: Automatically backport this PR after it's merged v8.1.0 Team:Threat Hunting:Explore v8.0.1 labels Feb 8, 2022
@stephmilovic stephmilovic requested a review from a team as a code owner February 8, 2022 18:59
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

});

test('Close Inspect Modal', () => {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Deleted this test because is duplicate of a test in modal.test.tsx

title,
}: ModalInspectProps) => {
if (!isShowing || request == null || response == null) {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Moved this check into the inspect/index.tsx where the modal is called from so we don't have to worry about the hooks being called conditionally.

const response =
'{"took": 880,"timed_out": false,"_shards": {"total": 26,"successful": 26,"skipped": 0,"failed": 0},"hits": {"max_score": null,"hits": []},"aggregations": {"hosts": {"value": 541},"hosts_histogram": {"buckets": [{"key_as_string": "2019 - 07 - 05T01: 00: 00.000Z", "key": 1562288400000, "doc_count": 1492321, "count": { "value": 105 }}, {"key_as_string": "2019 - 07 - 05T13: 00: 00.000Z", "key": 1562331600000, "doc_count": 2412761, "count": { "value": 453}},{"key_as_string": "2019 - 07 - 06T01: 00: 00.000Z", "key": 1562374800000, "doc_count": 111658, "count": { "value": 15}}],"interval": "12h"}},"status": 200}';

describe('Modal Inspect', () => {
const closeModal = jest.fn();

describe('rendering', () => {
test('when isShowing is positive and request and response are not null', () => {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

moved this check to inspect/index.tsx so the tests are now in inspect/index.test.tsx

@stephmilovic stephmilovic requested a review from a team February 8, 2022 19:08
Copy link

@monina-n monina-n left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good from design thanks

Copy link
Contributor

@jamster10 jamster10 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good to go!

@jamster10
Copy link
Contributor

@elasticmachine merge upstream

@kibana-ci
Copy link
Collaborator

💛 Build succeeded, but was flaky

Test Failures

  • [job] [logs] Docker CI Group / endpoint When on the Endpoint Policy Details Page and the save button is clicked should persist update on the screen
  • [job] [logs] Security Solution Tests / Export rules Exports a custom rule

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 4.7MB 4.7MB +1.2KB

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@stephmilovic stephmilovic merged commit bad98b6 into elastic:main Feb 9, 2022
@stephmilovic stephmilovic deleted the issue_121377 branch February 9, 2022 23:43
@kibanamachine
Copy link
Contributor

The following labels were identified as gaps in your version labels and will be added automatically:

  • v8.2.0

If any of these should not be on your pull request, please manually remove them.

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Feb 9, 2022
@kibanamachine
Copy link
Contributor

💔 Some backports could not be created

Status Branch Result
8.0 Backport failed because of merge conflicts

You might need to backport the following PRs to 8.0:
- [SIEM][Timeline] Persist timeline to localStorage (#67156)
- [SECURITY] Rename siem plugin to security_solution (#67902)
8.1

How to fix

Re-run the backport manually:

node scripts/backport --pr 125007

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request Feb 10, 2022
… data view index pattern (#125007) (#125174)

(cherry picked from commit bad98b6)

Co-authored-by: Steph Milovic <stephanie.milovic@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Deprecated: Automatically backport this PR after it's merged release_note:skip Skip the PR/issue when compiling release notes Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Explore Team:Threat Hunting Security Solution Threat Hunting Team v8.0.0 v8.0.1 v8.1.0 v8.2.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants