[Security Solution][Detection Engine] removes legacy alerting endpoin…

…ts from Security Solution scripts
elastic · Oct 23, 2024 · 7a054b2 · 7a054b2
1 parent 4a7ce90
commit 7a054b2
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 6 deletions.
diff --git a/...tection_engine/scripts/get_alert_types.sh → ...ion_engine/scripts/find_alerting_rules.sh b/...tection_engine/scripts/get_alert_types.sh → ...ion_engine/scripts/find_alerting_rules.sh
@@ -10,9 +10,10 @@
 set -e
 ./check_env_variables.sh
 
-# Example: ./get_alert_types.sh
-# https://github.com/elastic/kibana/blob/main/x-pack/plugins/alerting/README.md#get-apialerttypes-list-alert-types
+# Example: ./find_alerting_rules.sh
+# https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findrules
+# use ./find_rules.sh to work with Detection(Security) rules
 curl -s -k \
   -u ${ELASTICSEARCH_USERNAME}:${ELASTICSEARCH_PASSWORD} \
-  -X GET ${KIBANA_URL}${SPACE_URL}/api/alerts/list_alert_types \
+  -X GET ${KIBANA_URL}${SPACE_URL}/api/alerting/rules/_find \
   | jq .
diff --git a/x-pack/plugins/security_solution/server/lib/detection_engine/scripts/find_rules.sh b/x-pack/plugins/security_solution/server/lib/detection_engine/scripts/find_rules.sh
@@ -12,5 +12,6 @@ set -e
 
 # Example: ./find_rules.sh
 curl -s -k \
+ -H 'elastic-api-version: 2023-10-31' \
  -u ${ELASTICSEARCH_USERNAME}:${ELASTICSEARCH_PASSWORD} \
  -X GET ${KIBANA_URL}${SPACE_URL}/api/detection_engine/rules/_find | jq .
diff --git a/...ion_engine/scripts/get_alert_instances.sh → ...engine/scripts/get_alerting_rule_types.sh b/...ion_engine/scripts/get_alert_instances.sh → ...engine/scripts/get_alerting_rule_types.sh
@@ -10,9 +10,9 @@
 set -e
 ./check_env_variables.sh
 
-# Example: ./get_alert_instances.sh
-# https://github.com/elastic/kibana/blob/main/x-pack/plugins/alerting/README.md#get-apialert_find-find-alerts
+# Example: ./get_rule_types.sh
+# https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getruletypes
 curl -s -k \
   -u ${ELASTICSEARCH_USERNAME}:${ELASTICSEARCH_PASSWORD} \
-  -X GET ${KIBANA_URL}${SPACE_URL}/api/alerts/_find \
+  -X GET ${KIBANA_URL}${SPACE_URL}/api/alerting/rule_types \
   | jq .