Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SIEM] [Detection Engine] Adds stable alerting ids, more scripting for product testing, and more unit tests #48471

Merged
merged 31 commits into from
Oct 17, 2019

Conversation

FrankHassanabad
Copy link
Contributor

@FrankHassanabad FrankHassanabad commented Oct 17, 2019

Summary

  • Adds stable alerting id's by using the alert params.
  • Currently does a manual walk through of the alert params to find the stable id
  • Updated all of the endpoints to take either of the two id's.
  • Added several scripts to support performance testing ad-hoc such as post_x_signals.sh
  • Added scripts to support converting from saved searches to alerts.
  • Consolidated and fixed a lot of the backend types
  • Added unit tests against the router endpoints
  • [SIEM][Detection Engine] Create REST API endpoint for KQL signals  #47013

Checklist

Use strikethroughs to remove checklist items you don't feel are applicable to this PR.

- [ ] This was checked for cross-browser compatibility, including a check against IE11

- [ ] Any text added follows EUI's writing guidelines, uses sentence case text and includes i18n support

- [ ] Documentation was added for features that require explanation or tutorials

- [ ] This was checked for keyboard-only and screenreader accessibility

For maintainers

@FrankHassanabad FrankHassanabad changed the title Change ecs schema [SIEM] Adds stable alerting ids, more scripting for product testing, and more unit tests Oct 17, 2019
@FrankHassanabad FrankHassanabad self-assigned this Oct 17, 2019
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@FrankHassanabad FrankHassanabad marked this pull request as ready for review October 17, 2019 02:28
@FrankHassanabad FrankHassanabad changed the title [SIEM] Adds stable alerting ids, more scripting for product testing, and more unit tests [SIEM] [Detection Engine] Adds stable alerting ids, more scripting for product testing, and more unit tests Oct 17, 2019
@elasticmachine
Copy link
Contributor

Pinging @elastic/siem (Team:SIEM)

Copy link
Contributor

@dhurley14 dhurley14 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lot's of great stuff in here. I especially appreciate the addition of the mock server for testing the routes. This is awesome. LGTM.

@FrankHassanabad FrankHassanabad merged commit 56b96e5 into elastic:master Oct 17, 2019
@FrankHassanabad FrankHassanabad deleted the change-ecs-schema branch October 17, 2019 20:39
FrankHassanabad added a commit to FrankHassanabad/kibana that referenced this pull request Oct 17, 2019
…r product testing, and more unit tests (elastic#48471)

* Adds stable alerting id's by using the alert params.
* Currently does a manual walk through of the alert params to find the stable id
* Updated all of the endpoints to take either of the two id's.
* Added several scripts to support performance testing ad-hoc such as `post_x_signals.sh`
* Added scripts to support converting from saved searches to alerts.
* Consolidated and fixed a lot of the backend types
* Added unit tests against the router endpoints
* elastic#47013

Use ~~strikethroughs~~ to remove checklist items you don't feel are applicable to this PR.

~~- [ ] This was checked for cross-browser compatibility, [including a check against IE11](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility)~~

~~- [ ] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)~~

~~- [ ] [Documentation](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#writing-documentation) was added for features that require explanation or tutorials~~

- [x] [Unit or functional tests](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility) were updated or added to match the most common scenarios

~~- [ ] This was checked for [keyboard-only and screenreader accessibility](https://developer.mozilla.org/en-US/docs/Learn/Tools_and_testing/Cross_browser_testing/Accessibility#Accessibility_testing_checklist)~~

- [ ] This was checked for breaking API changes and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
- [ ] This includes a feature addition or change that requires a release note and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
FrankHassanabad added a commit that referenced this pull request Oct 18, 2019
…r product testing, and more unit tests (#48471) (#48580)

* Adds stable alerting id's by using the alert params.
* Currently does a manual walk through of the alert params to find the stable id
* Updated all of the endpoints to take either of the two id's.
* Added several scripts to support performance testing ad-hoc such as `post_x_signals.sh`
* Added scripts to support converting from saved searches to alerts.
* Consolidated and fixed a lot of the backend types
* Added unit tests against the router endpoints
* #47013

Use ~~strikethroughs~~ to remove checklist items you don't feel are applicable to this PR.

~~- [ ] This was checked for cross-browser compatibility, [including a check against IE11](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility)~~

~~- [ ] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)~~

~~- [ ] [Documentation](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#writing-documentation) was added for features that require explanation or tutorials~~

- [x] [Unit or functional tests](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#cross-browser-compatibility) were updated or added to match the most common scenarios

~~- [ ] This was checked for [keyboard-only and screenreader accessibility](https://developer.mozilla.org/en-US/docs/Learn/Tools_and_testing/Cross_browser_testing/Accessibility#Accessibility_testing_checklist)~~

- [ ] This was checked for breaking API changes and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
- [ ] This includes a feature addition or change that requires a release note and was [labeled appropriately](https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#release-notes-process)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants