[Security Solution][Detections] Update rule integration tests

[dplumlee]

Summary

Updates rule integration tests to compare full _source outputs instead of just signal outputs. Also adds rule_name_override integration tests

Checklist

Delete any items that are not applicable to this PR.

• Documentation was added for features that require explanation or tutorials
• Unit or functional tests were updated or added to match the most common scenarios

For maintainers

• This was checked for breaking API changes and was labeled appropriately

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[dplumlee]

@elasticmachine merge upstream

[marshallmain]

One small addition to the rule name override test, other than that it looks great. Thanks for fleshing out these tests!

[marshallmain]

Here we want to check that signal.rule.name is properly overridden with the value from the event.action field. To avoid checking the rest of the fields you could do something like

rule: {
  ...fullSignal.signal.rule,
  name: 'boot',
  rule_name_override: 'event.action',
}

[marshallmain]

LGTM pending CI pass

[kibanamachine]

💚 Build Succeeded

• continuous-integration/kibana-ci/pull-request
• Commit: 3db2841
• Storybooks Preview

Metrics [docs]

Unknown metric groups

References to deprecated APIs

id	before	after	diff
canvas	29	25	-4
crossClusterReplication	8	6	-2
fleet	22	20	-2
globalSearch	4	2	-2
indexManagement	12	7	-5
infra	261	149	-112
lens	67	45	-22
licensing	18	15	-3
lists	239	236	-3
maps	286	208	-78
ml	121	115	-6
monitoring	109	56	-53
securitySolution	390	346	-44
stackAlerts	101	95	-6
total			-342

History

• 💚 Build #128055 succeeded 6532fd9243e7994f903fa3a695cbed7d49b79b93
• 💚 Build #127309 succeeded 6ef71874685f7de5d57f0512087d6aba4b1fd5dd
• 💔 Build #122748 failed 957c122167207d695d5cc6d19ea7f11b1c2af261

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @dplumlee

[kibanamachine]

💚 Backport successful

Status	Branch	Result
✅	7.x

This backport PR will be merged automatically after passing CI.