[Detection Engine][Telemetry] Adds basic suppression telemetry

[yctercero]

Summary

Adds some basic alert suppression telemetry around to answer:

• Is telemetry enabled?
• When enabled, is it enabled per rule execution?
• When enabled, is it enabled per time period?
• When enabled, is missing field strategy set to suppress?

[yctercero]

/ci

[yctercero]

/ci

[kibana-ci]

💔 Build Failed

• Buildkite Build
• Commit: 74d106f
• Interpreting CI Failures

Failed CI Steps

• Jest Tests #4
• Jest Tests #4
• FTR Configs #71
• FTR Configs #71
• FTR Configs #93
• FTR Configs #93
• Check Types and Build API Docs
• Defend Workflows Cypress Tests #2
• Defend Workflows Cypress Tests on Serverless #14

Test Failures

• [job] [logs] FTR Configs #71 / Detections Response - Detection rule type telemetry @ess @serverless Detection rule telemetry "kql" rule type should show "notifications_enabled", "notifications_disabled" "legacy_notifications_enabled", "legacy_notifications_disabled", all to be "0" for "disabled"/"in-active" rule that does not have any actions
• [job] [logs] FTR Configs #93 / Detections Response - Detection rule type telemetry @ess @serverless Detection rule telemetry "kql" rule type should show "notifications_enabled", "notifications_disabled" "legacy_notifications_enabled", "legacy_notifications_disabled", all to be "0" for "disabled"/"in-active" rule that does not have any actions
• [job] [logs] FTR Configs #93 / Detections Response - Detection rule type telemetry @ess @serverless Detection rule telemetry "kql" rule type should show "notifications_enabled", "notifications_disabled" "legacy_notifications_enabled", "legacy_notifications_disabled", all to be "0" for "disabled"/"in-active" rule that does not have any actions
• [job] [logs] FTR Configs #71 / Detections Response - Detection rule type telemetry @ess @serverless Detection rule telemetry "kql" rule type should show "notifications_enabled", "notifications_disabled" "legacy_notifications_enabled", "legacy_notifications_disabled", all to be "0" for "disabled"/"in-active" rule that does not have any actions
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics getRuleMetrics() returns information with on non elastic prebuilt rule
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics getRuleMetrics() returns information with on non elastic prebuilt rule
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics getRuleMetrics() returns information with rule, alerts and cases
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics getRuleMetrics() returns information with rule, alerts and cases
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics getRuleMetrics() returns information with rule, no alerts and no cases
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics getRuleMetrics() returns information with rule, no alerts and no cases
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics Update metrics with rule information Should update based on multiple metrics
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics Update metrics with rule information Should update based on multiple metrics
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics Update metrics with rule information Should update elastic and eql rule metric total
• [job] [logs] Jest Tests #4 / Detections Usage and Metrics Update metrics with rule information Should update elastic and eql rule metric total
• [job] [logs] Defend Workflows Cypress Tests #2 / Response console Processes operations: "kill-process --pid" - should kill a process "kill-process --pid" - should kill a process
• [job] [logs] Defend Workflows Cypress Tests on Serverless #14 / Response console Processes operations: "kill-process --pid" - should kill a process "kill-process --pid" - should kill a process
• [job] [logs] Defend Workflows Cypress Tests #2 / Response console Processes operations: "processes" - should obtain a list of processes "processes" - should obtain a list of processes
• [job] [logs] Defend Workflows Cypress Tests on Serverless #14 / Response console Processes operations: "processes" - should obtain a list of processes "processes" - should obtain a list of processes
• [job] [logs] Defend Workflows Cypress Tests #2 / Response console Processes operations: "suspend-process --pid" - should suspend a process "suspend-process --pid" - should suspend a process
• [job] [logs] Defend Workflows Cypress Tests on Serverless #14 / Response console Processes operations: "suspend-process --pid" - should suspend a process "suspend-process --pid" - should suspend a process

Metrics [docs]

✅ unchanged

History

• 💔 Build #204799 failed 9d71020

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @yctercero