-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Time series visual builder] Annotations do not respect filters #11232
Comments
The only problem I see with applying the filters to the annotations is that you may not always want that behavior. Take the use case where the annotations are coming from a different index pattern which doesn't contain the field you're filtering on; annotations will not be display (think outage indicators or logging info). What we probably need is another option on the annotations like The use case above was never considered but is very innovative 🥇 |
cc: @skearns64 @tbragin |
@simianhacker I agree, it would be nice to have as a configurable option. I can see the benefits for keeping the annotations there when filtering the data. Even something like a toggle for annotations within the actual chart might be nice so one can show / hide on the fly |
One use-case for annotations in this way, would be showing detected ML Anomalies as an overlay to the raw data. The anomalies are held in a separate index from the original data. One tricky use-case would be filtering the raw data in one way (e.g. just machine X), and the annotations in another way (e.g. only show anomalies with scores >75, or show all). |
#206822) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR provides: * a structure for the SIEM Migrations Integration Tests * simple SIEM Migrations GET API test --------- Co-authored-by: kibanamachine <[email protected]>
…c#11232) (elastic#206822) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR provides: * a structure for the SIEM Migrations Integration Tests * simple SIEM Migrations GET API test --------- Co-authored-by: kibanamachine <[email protected]> (cherry picked from commit 7e48400)
…11232) (#206822) (#206946) # Backport This will backport the following commits from `main` to `8.x`: - [[Rules migration] Basic integration test and folder structure (#11232) (#206822)](#206822) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-01-16T13:43:05Z","message":"[Rules migration] Basic integration test and folder structure (#11232) (#206822)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR provides:\r\n* a structure for the SIEM Migrations Integration Tests\r\n* simple SIEM Migrations GET API test\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine <[email protected]>","sha":"7e48400ade92fbf5035034e5e6025657480ce73f","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:prev-minor"],"title":"[Rules migration] Basic integration test and folder structure (#11232)","number":206822,"url":"https://github.com/elastic/kibana/pull/206822","mergeCommit":{"message":"[Rules migration] Basic integration test and folder structure (#11232) (#206822)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR provides:\r\n* a structure for the SIEM Migrations Integration Tests\r\n* simple SIEM Migrations GET API test\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine <[email protected]>","sha":"7e48400ade92fbf5035034e5e6025657480ce73f"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/206822","number":206822,"mergeCommit":{"message":"[Rules migration] Basic integration test and folder structure (#11232) (#206822)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR provides:\r\n* a structure for the SIEM Migrations Integration Tests\r\n* simple SIEM Migrations GET API test\r\n\r\n---------\r\n\r\nCo-authored-by: kibanamachine <[email protected]>","sha":"7e48400ade92fbf5035034e5e6025657480ce73f"}}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
…c#11232) (elastic#206822) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR provides: * a structure for the SIEM Migrations Integration Tests * simple SIEM Migrations GET API test --------- Co-authored-by: kibanamachine <[email protected]>
…210867) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations GET API (route: `/internal/siem_migrations/rules/{migration_id}`) integration test: * Basic calls * Filtering * Sorting * Pagination
…11232) (elastic#210867) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations GET API (route: `/internal/siem_migrations/rules/{migration_id}`) integration test: * Basic calls * Filtering * Sorting * Pagination (cherry picked from commit 526ff05)
…11232) (elastic#210867) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations GET API (route: `/internal/siem_migrations/rules/{migration_id}`) integration test: * Basic calls * Filtering * Sorting * Pagination (cherry picked from commit 526ff05)
…) (elastic#211196) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Update API (route: `PUT /internal/siem_migrations/rules/{migration_id}`) integration test: * Happy path * update migration * ignore attributes that are not eligible for update * Error handling * an empty content response * an error when rule's id is not specified * an error when undefined payload has been passed Also, as part of this PR, I added error handling cases for Create API: * no content error * an error when undefined payload has been passed * an error when original rule id is not specified * error when original rule vendor is not specified * an error when original rule title is not specified * an error when original rule description is not specified * an error when original rule query is not specified * an error when original rule query_language is not specified --------- Co-authored-by: Sergi Massaneda <[email protected]> (cherry picked from commit 819fd7a)
…) (elastic#211196) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Update API (route: `PUT /internal/siem_migrations/rules/{migration_id}`) integration test: * Happy path * update migration * ignore attributes that are not eligible for update * Error handling * an empty content response * an error when rule's id is not specified * an error when undefined payload has been passed Also, as part of this PR, I added error handling cases for Create API: * no content error * an error when undefined payload has been passed * an error when original rule id is not specified * error when original rule vendor is not specified * an error when original rule title is not specified * an error when original rule description is not specified * an error when original rule query is not specified * an error when original rule query_language is not specified --------- Co-authored-by: Sergi Massaneda <[email protected]> (cherry picked from commit 819fd7a)
…) (elastic#211196) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Update API (route: `PUT /internal/siem_migrations/rules/{migration_id}`) integration test: * Happy path * update migration * ignore attributes that are not eligible for update * Error handling * an empty content response * an error when rule's id is not specified * an error when undefined payload has been passed Also, as part of this PR, I added error handling cases for Create API: * no content error * an error when undefined payload has been passed * an error when original rule id is not specified * error when original rule vendor is not specified * an error when original rule title is not specified * an error when original rule description is not specified * an error when original rule query is not specified * an error when original rule query_language is not specified --------- Co-authored-by: Sergi Massaneda <[email protected]> (cherry picked from commit 819fd7a)
… (#211196) (#211297) # Backport This will backport the following commits from `main` to `8.x`: - [[Rules migration][Integration test] Update migration API (#11232) (#211196)](#211196) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-14T17:39:21Z","message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Update migration API (#11232)","number":211196,"url":"https://github.com/elastic/kibana/pull/211196","mergeCommit":{"message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211196","number":211196,"mergeCommit":{"message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
…) (#211196) (#211296) # Backport This will backport the following commits from `main` to `8.18`: - [[Rules migration][Integration test] Update migration API (#11232) (#211196)](#211196) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-14T17:39:21Z","message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Update migration API (#11232)","number":211196,"url":"https://github.com/elastic/kibana/pull/211196","mergeCommit":{"message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211196","number":211196,"mergeCommit":{"message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
… (#211196) (#211298) # Backport This will backport the following commits from `main` to `9.0`: - [[Rules migration][Integration test] Update migration API (#11232) (#211196)](#211196) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-14T17:39:21Z","message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Update migration API (#11232)","number":211196,"url":"https://github.com/elastic/kibana/pull/211196","mergeCommit":{"message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211196","number":211196,"mergeCommit":{"message":"[Rules migration][Integration test] Update migration API (#11232) (#211196)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Update API (route: `PUT\r\n/internal/siem_migrations/rules/{migration_id}`) integration test:\r\n* Happy path\r\n * update migration\r\n * ignore attributes that are not eligible for update\r\n* Error handling\r\n * an empty content response\r\n * an error when rule's id is not specified\r\n * an error when undefined payload has been passed\r\n\r\nAlso, as part of this PR, I added error handling cases for Create API:\r\n* no content error\r\n* an error when undefined payload has been passed\r\n* an error when original rule id is not specified\r\n* error when original rule vendor is not specified\r\n* an error when original rule title is not specified\r\n* an error when original rule description is not specified\r\n* an error when original rule query is not specified\r\n* an error when original rule query_language is not specified\r\n\r\n---------\r\n\r\nCo-authored-by: Sergi Massaneda <[email protected]>","sha":"819fd7a3e9f0e885bc22f382dcc165ea1a4b55e7"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Stats APIs: * Retrieves the stats for the specific migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/stat`) * Retrieves the stats for all the existing migrations, aggregated by `migration_id`: (route: `GET /internal/siem_migrations/rules/stats`) * Retrieves the translation stats for the migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/translation_stats`)
…ic#211315) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Stats APIs: * Retrieves the stats for the specific migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/stat`) * Retrieves the stats for all the existing migrations, aggregated by `migration_id`: (route: `GET /internal/siem_migrations/rules/stats`) * Retrieves the translation stats for the migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/translation_stats`) (cherry picked from commit 6006546)
…ic#211315) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Stats APIs: * Retrieves the stats for the specific migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/stat`) * Retrieves the stats for all the existing migrations, aggregated by `migration_id`: (route: `GET /internal/siem_migrations/rules/stats`) * Retrieves the translation stats for the migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/translation_stats`) (cherry picked from commit 6006546)
…ic#211315) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Stats APIs: * Retrieves the stats for the specific migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/stat`) * Retrieves the stats for all the existing migrations, aggregated by `migration_id`: (route: `GET /internal/siem_migrations/rules/stats`) * Retrieves the translation stats for the migration: (route: `GET /internal/siem_migrations/rules/{migration_id}/translation_stats`) (cherry picked from commit 6006546)
… (#211338) # Backport This will backport the following commits from `main` to `9.0`: - [[Rules migration][Integration test] Stats APIs (#11232) (#211315)](#211315) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-14T23:30:43Z","message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Stats APIs (#11232)","number":211315,"url":"https://github.com/elastic/kibana/pull/211315","mergeCommit":{"message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211315","number":211315,"mergeCommit":{"message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
…) (#211336) # Backport This will backport the following commits from `main` to `8.18`: - [[Rules migration][Integration test] Stats APIs (#11232) (#211315)](#211315) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-14T23:30:43Z","message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Stats APIs (#11232)","number":211315,"url":"https://github.com/elastic/kibana/pull/211315","mergeCommit":{"message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211315","number":211315,"mergeCommit":{"message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
… (#211337) # Backport This will backport the following commits from `main` to `8.x`: - [[Rules migration][Integration test] Stats APIs (#11232) (#211315)](#211315) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-14T23:30:43Z","message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Stats APIs (#11232)","number":211315,"url":"https://github.com/elastic/kibana/pull/211315","mergeCommit":{"message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211315","number":211315,"mergeCommit":{"message":"[Rules migration][Integration test] Stats APIs (#11232) (#211315)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Stats APIs:\r\n* Retrieves the stats for the specific migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/stat`)\r\n* Retrieves the stats for all the existing migrations, aggregated by\r\n`migration_id`: (route: `GET /internal/siem_migrations/rules/stats`)\r\n* Retrieves the translation stats for the migration: (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/translation_stats`)","sha":"6006546dc4abd005eb05a587b28bbef2a2b39bc7"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Install API (route: `POST /internal/siem_migrations/rules/{migration_id}/install`) integration test: * install all installable custom migration rules * install all installable migration rules matched with prebuilt rules * install and enable all installable migration rules * install migration rules by ids * install rules of non-existing migration - nothing should be installed * Error handling: an error if body payload is not passed
…stic#211339) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Install API (route: `POST /internal/siem_migrations/rules/{migration_id}/install`) integration test: * install all installable custom migration rules * install all installable migration rules matched with prebuilt rules * install and enable all installable migration rules * install migration rules by ids * install rules of non-existing migration - nothing should be installed * Error handling: an error if body payload is not passed (cherry picked from commit cd502ac)
…stic#211339) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Install API (route: `POST /internal/siem_migrations/rules/{migration_id}/install`) integration test: * install all installable custom migration rules * install all installable migration rules matched with prebuilt rules * install and enable all installable migration rules * install migration rules by ids * install rules of non-existing migration - nothing should be installed * Error handling: an error if body payload is not passed (cherry picked from commit cd502ac)
…stic#211339) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Install API (route: `POST /internal/siem_migrations/rules/{migration_id}/install`) integration test: * install all installable custom migration rules * install all installable migration rules matched with prebuilt rules * install and enable all installable migration rules * install migration rules by ids * install rules of non-existing migration - nothing should be installed * Error handling: an error if body payload is not passed (cherry picked from commit cd502ac)
…1339) (#211401) # Backport This will backport the following commits from `main` to `8.18`: - [[Rules migration][Integration test] Install APIs (#11232) (#211339)](#211339) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-17T10:25:33Z","message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Install APIs (#11232)","number":211339,"url":"https://github.com/elastic/kibana/pull/211339","mergeCommit":{"message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211339","number":211339,"mergeCommit":{"message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
) (#211404) # Backport This will backport the following commits from `main` to `9.0`: - [[Rules migration][Integration test] Install APIs (#11232) (#211339)](#211339) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-17T10:25:33Z","message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Install APIs (#11232)","number":211339,"url":"https://github.com/elastic/kibana/pull/211339","mergeCommit":{"message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211339","number":211339,"mergeCommit":{"message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
) (#211402) # Backport This will backport the following commits from `main` to `8.x`: - [[Rules migration][Integration test] Install APIs (#11232) (#211339)](#211339) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-17T10:25:33Z","message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Install APIs (#11232)","number":211339,"url":"https://github.com/elastic/kibana/pull/211339","mergeCommit":{"message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211339","number":211339,"mergeCommit":{"message":"[Rules migration][Integration test] Install APIs (#11232) (#211339)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Install API (route: `POST\r\n/internal/siem_migrations/rules/{migration_id}/install`) integration\r\ntest:\r\n* install all installable custom migration rules\r\n* install all installable migration rules matched with prebuilt rules\r\n* install and enable all installable migration rules\r\n* install migration rules by ids\r\n* install rules of non-existing migration - nothing should be installed\r\n* Error handling: an error if body payload is not passed","sha":"cd502acea12979979497f62897be663044ade3aa"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
…211403) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Get prebuilt rules API (route: `GET /internal/siem_migrations/rules/{migration_id}/prebuilt_rules`) integration test: * get all prebuilt rules matched by migration rules * return empty response when migration rules did not match prebuilt rules
…11232) (elastic#211403) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Get prebuilt rules API (route: `GET /internal/siem_migrations/rules/{migration_id}/prebuilt_rules`) integration test: * get all prebuilt rules matched by migration rules * return empty response when migration rules did not match prebuilt rules (cherry picked from commit 0adce7a)
…11232) (elastic#211403) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Get prebuilt rules API (route: `GET /internal/siem_migrations/rules/{migration_id}/prebuilt_rules`) integration test: * get all prebuilt rules matched by migration rules * return empty response when migration rules did not match prebuilt rules (cherry picked from commit 0adce7a)
…11232) (elastic#211403) ## Summary [Internal link](elastic/security-team#10820) to the feature details Part of elastic/security-team#11232 This PR covers SIEM Migrations Get prebuilt rules API (route: `GET /internal/siem_migrations/rules/{migration_id}/prebuilt_rules`) integration test: * get all prebuilt rules matched by migration rules * return empty response when migration rules did not match prebuilt rules (cherry picked from commit 0adce7a)
…11232) (#211403) (#211426) # Backport This will backport the following commits from `main` to `8.18`: - [[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)](#211403) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-17T12:31:30Z","message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232)","number":211403,"url":"https://github.com/elastic/kibana/pull/211403","mergeCommit":{"message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211403","number":211403,"mergeCommit":{"message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
…1232) (#211403) (#211427) # Backport This will backport the following commits from `main` to `8.x`: - [[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)](#211403) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-17T12:31:30Z","message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232)","number":211403,"url":"https://github.com/elastic/kibana/pull/211403","mergeCommit":{"message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211403","number":211403,"mergeCommit":{"message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
…1232) (#211403) (#211428) # Backport This will backport the following commits from `main` to `9.0`: - [[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)](#211403) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Ievgen Sorokopud","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-02-17T12:31:30Z","message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Threat Hunting","Team: SecuritySolution","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232)","number":211403,"url":"https://github.com/elastic/kibana/pull/211403","mergeCommit":{"message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/211403","number":211403,"mergeCommit":{"message":"[Rules migration][Integration test] Get Prebuilt Rules APIs (#11232) (#211403)\n\n## Summary\r\n\r\n[Internal link](https://github.com/elastic/security-team/issues/10820)\r\nto the feature details\r\n\r\nPart of https://github.com/elastic/security-team/issues/11232\r\n\r\nThis PR covers SIEM Migrations Get prebuilt rules API (route: `GET\r\n/internal/siem_migrations/rules/{migration_id}/prebuilt_rules`)\r\nintegration test:\r\n* get all prebuilt rules matched by migration rules\r\n* return empty response when migration rules did not match prebuilt\r\nrules","sha":"0adce7a3dbdfc8d6a6bbdff3765da1d05e12c0fb"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Ievgen Sorokopud <[email protected]>
The annotations in TSVB do not seem to be respecting the filters that apply to them. When setting an annotation for any memory usage >12GB, we get the following chart.
If I add a query or filter to only provide values < 12GB on a dashboard or visualization, the annotations are still seen.
As a user, I'd expect any query or filter to be applied to the annotations as well.
The text was updated successfully, but these errors were encountered: