display EQL options diff

elastic · Nov 21, 2024 · 45bfabc · 45bfabc
1 parent 1eedbd2
commit 45bfabc
Showing 1 changed file with 17 additions and 18 deletions.
diff --git a/.../components/rule_details/three_way_diff/comparison_side/get_subfield_changes/eql_query.ts b/.../components/rule_details/three_way_diff/comparison_side/get_subfield_changes/eql_query.ts
@@ -15,26 +15,25 @@ export const getSubfieldChangesForEqlQuery = (
 ): SubfieldChange[] => {
   const changes: SubfieldChange[] = [];
 
-  const oldQuery = stringifyToSortedJson(oldFieldValue?.query);
-  const newQuery = stringifyToSortedJson(newFieldValue?.query);
+  const subFieldNames: Array<keyof DiffableAllFields['eql_query']> = [
+    'query',
+    'filters',
+    'event_category_override',
+    'tiebreaker_field',
+    'timestamp_field',
+  ];
 
-  if (oldQuery !== newQuery) {
-    changes.push({
-      subfieldName: 'query',
-      oldSubfieldValue: oldQuery,
-      newSubfieldValue: newQuery,
-    });
-  }
-
-  const oldFilters = stringifyToSortedJson(oldFieldValue?.filters);
-  const newFilters = stringifyToSortedJson(newFieldValue?.filters);
+  for (const subFieldName of subFieldNames) {
+    const oldValue = stringifyToSortedJson(oldFieldValue?.[subFieldName]);
+    const newValue = stringifyToSortedJson(newFieldValue?.[subFieldName]);
 
-  if (oldFilters !== newFilters) {
-    changes.push({
-      subfieldName: 'filters',
-      oldSubfieldValue: oldFilters,
-      newSubfieldValue: newFilters,
-    });
+    if (newValue !== oldValue) {
+      changes.push({
+        subfieldName: subFieldName,
+        oldSubfieldValue: oldValue,
+        newSubfieldValue: newValue,
+      });
+    }
   }
 
   return changes;