diff --git a/.buildkite/ftr_configs.yml b/.buildkite/ftr_configs.yml
index f3af92d9e934..4ac592cca57a 100644
--- a/.buildkite/ftr_configs.yml
+++ b/.buildkite/ftr_configs.yml
@@ -305,6 +305,7 @@ enabled:
- x-pack/test/functional/apps/ml/stack_management_jobs/config.ts
- x-pack/test/functional/apps/monitoring/config.ts
- x-pack/test/functional/apps/observability_logs_explorer/config.ts
+ - x-pack/test/functional/apps/dataset_quality/config.ts
- x-pack/test/functional/apps/painless_lab/config.ts
- x-pack/test/functional/apps/remote_clusters/config.ts
- x-pack/test/functional/apps/reporting_management/config.ts
diff --git a/.buildkite/hooks/post-command b/.buildkite/hooks/post-command
index 13e0f4d79582..21a4326498fc 100755
--- a/.buildkite/hooks/post-command
+++ b/.buildkite/hooks/post-command
@@ -1,7 +1,3 @@
#!/usr/bin/env bash
-if [[ "$BUILDKITE_AGENT_NAME" =~ ^bk-agent ]]; then
- echo "Pipeline file triggered from outside the kibana executors, skipping post_command"
-else
- .buildkite/scripts/lifecycle/post_command.sh
-fi
+source .buildkite/scripts/lifecycle/post_command.sh
diff --git a/.buildkite/hooks/pre-command b/.buildkite/hooks/pre-command
index 725591fdf19b..58a2c5f0b499 100644
--- a/.buildkite/hooks/pre-command
+++ b/.buildkite/hooks/pre-command
@@ -1,8 +1,3 @@
#!/usr/bin/env bash
-if [[ "$BUILDKITE_AGENT_NAME" =~ ^bk-agent ]]; then
- echo "Pipeline file triggered from outside the kibana executors, skipping .buildkite/scripts/lifecycle/pre_command.sh"
- export SONAR_LOGIN=$(vault read -field=token secret/ci/elastic-kibana/sonarqube)
-else
- source .buildkite/scripts/lifecycle/pre_command.sh
-fi
+source .buildkite/scripts/lifecycle/pre_command.sh
diff --git a/.buildkite/package-lock.json b/.buildkite/package-lock.json
index 5b19d688aa3f..401f25347ebc 100644
--- a/.buildkite/package-lock.json
+++ b/.buildkite/package-lock.json
@@ -22,7 +22,7 @@
"@types/mocha": "^10.0.1",
"@types/node": "^15.12.2",
"chai": "^4.3.10",
- "mocha": "^10.2.0",
+ "mocha": "^10.3.0",
"nock": "^12.0.2",
"ts-node": "^10.7.0",
"typescript": "^4.6.4"
@@ -351,11 +351,11 @@
"integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
},
"node_modules/axios": {
- "version": "1.6.3",
- "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz",
- "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==",
+ "version": "1.6.7",
+ "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.7.tgz",
+ "integrity": "sha512-/hDJGff6/c7u0hDkvkGxR/oy6CbCs8ziCsC7SqmhjfozqiJGc8Z11wrv9z9lYfY4K8l+H9TpjcMDX0xOZmx+RA==",
"dependencies": {
- "follow-redirects": "^1.15.0",
+ "follow-redirects": "^1.15.4",
"form-data": "^4.0.0",
"proxy-from-env": "^1.1.0"
}
@@ -529,12 +529,6 @@
"node": ">= 0.8"
}
},
- "node_modules/concat-map": {
- "version": "0.0.1",
- "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
- "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
- "dev": true
- },
"node_modules/create-require": {
"version": "1.1.1",
"resolved": "https://registry.npmjs.org/create-require/-/create-require-1.1.1.tgz",
@@ -772,20 +766,19 @@
}
},
"node_modules/glob": {
- "version": "7.2.0",
- "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz",
- "integrity": "sha512-lmLf6gtyrPq8tTjSmrO94wBeQbFR3HbLHbuyD69wuyQkImp2hWqMGB47OX65FBkPffO641IP9jWa1z4ivqG26Q==",
+ "version": "8.1.0",
+ "resolved": "https://registry.npmjs.org/glob/-/glob-8.1.0.tgz",
+ "integrity": "sha512-r8hpEjiQEYlF2QU0df3dS+nxxSIreXQS1qRhMJM0Q5NDdR386C7jb7Hwwod8Fgiuex+k0GFjgft18yvxm5XoCQ==",
"dev": true,
"dependencies": {
"fs.realpath": "^1.0.0",
"inflight": "^1.0.4",
"inherits": "2",
- "minimatch": "^3.0.4",
- "once": "^1.3.0",
- "path-is-absolute": "^1.0.0"
+ "minimatch": "^5.0.1",
+ "once": "^1.3.0"
},
"engines": {
- "node": "*"
+ "node": ">=12"
},
"funding": {
"url": "https://github.com/sponsors/isaacs"
@@ -802,28 +795,6 @@
"node": ">= 6"
}
},
- "node_modules/glob/node_modules/brace-expansion": {
- "version": "1.1.11",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
- "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
- "dev": true,
- "dependencies": {
- "balanced-match": "^1.0.0",
- "concat-map": "0.0.1"
- }
- },
- "node_modules/glob/node_modules/minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
- "dev": true,
- "dependencies": {
- "brace-expansion": "^1.1.7"
- },
- "engines": {
- "node": "*"
- }
- },
"node_modules/globby": {
"version": "11.1.0",
"resolved": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz",
@@ -1082,9 +1053,9 @@
}
},
"node_modules/mocha": {
- "version": "10.2.0",
- "resolved": "https://registry.npmjs.org/mocha/-/mocha-10.2.0.tgz",
- "integrity": "sha512-IDY7fl/BecMwFHzoqF2sg/SHHANeBoMMXFlS9r0OXKDssYE1M5O43wUY/9BVPeIvfH2zmEbBfseqN9gBQZzXkg==",
+ "version": "10.3.0",
+ "resolved": "https://registry.npmjs.org/mocha/-/mocha-10.3.0.tgz",
+ "integrity": "sha512-uF2XJs+7xSLsrmIvn37i/wnc91nw7XjOQB8ccyx5aEgdnohr7n+rEiZP23WkCYHjilR6+EboEnbq/ZQDz4LSbg==",
"dev": true,
"dependencies": {
"ansi-colors": "4.1.1",
@@ -1094,13 +1065,12 @@
"diff": "5.0.0",
"escape-string-regexp": "4.0.0",
"find-up": "5.0.0",
- "glob": "7.2.0",
+ "glob": "8.1.0",
"he": "1.2.0",
"js-yaml": "4.1.0",
"log-symbols": "4.1.0",
"minimatch": "5.0.1",
"ms": "2.1.3",
- "nanoid": "3.3.3",
"serialize-javascript": "6.0.0",
"strip-json-comments": "3.1.1",
"supports-color": "8.1.1",
@@ -1115,10 +1085,6 @@
},
"engines": {
"node": ">= 14.0.0"
- },
- "funding": {
- "type": "opencollective",
- "url": "https://opencollective.com/mochajs"
}
},
"node_modules/mocha/node_modules/ansi-colors": {
@@ -1169,18 +1135,6 @@
"integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
"dev": true
},
- "node_modules/nanoid": {
- "version": "3.3.3",
- "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.3.tgz",
- "integrity": "sha512-p1sjXuopFs0xg+fPASzQ28agW1oHD7xDsd9Xkf3T15H3c/cifrFHVwrh74PdoklAPi+i7MdRsE47vm2r6JoB+w==",
- "dev": true,
- "bin": {
- "nanoid": "bin/nanoid.cjs"
- },
- "engines": {
- "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
- }
- },
"node_modules/nock": {
"version": "12.0.3",
"resolved": "https://registry.npmjs.org/nock/-/nock-12.0.3.tgz",
@@ -1271,15 +1225,6 @@
"node": ">=8"
}
},
- "node_modules/path-is-absolute": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
- "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==",
- "dev": true,
- "engines": {
- "node": ">=0.10.0"
- }
- },
"node_modules/path-type": {
"version": "4.0.0",
"resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz",
@@ -1423,9 +1368,9 @@
]
},
"node_modules/serialize-javascript": {
- "version": "6.0.0",
- "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.0.tgz",
- "integrity": "sha512-Qr3TosvguFt8ePWqsvRfrKyQXIiW+nGbYpy8XK24NQHE83caxWt+mIymTT19DGFbNWNLfEwsrkSmN64lVWB9ag==",
+ "version": "6.0.2",
+ "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
+ "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
"dev": true,
"dependencies": {
"randombytes": "^2.1.0"
@@ -2001,11 +1946,11 @@
"integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
},
"axios": {
- "version": "1.6.3",
- "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.3.tgz",
- "integrity": "sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==",
+ "version": "1.6.7",
+ "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.7.tgz",
+ "integrity": "sha512-/hDJGff6/c7u0hDkvkGxR/oy6CbCs8ziCsC7SqmhjfozqiJGc8Z11wrv9z9lYfY4K8l+H9TpjcMDX0xOZmx+RA==",
"requires": {
- "follow-redirects": "^1.15.0",
+ "follow-redirects": "^1.15.4",
"form-data": "^4.0.0",
"proxy-from-env": "^1.1.0"
}
@@ -2138,12 +2083,6 @@
"delayed-stream": "~1.0.0"
}
},
- "concat-map": {
- "version": "0.0.1",
- "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
- "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
- "dev": true
- },
"create-require": {
"version": "1.1.1",
"resolved": "https://registry.npmjs.org/create-require/-/create-require-1.1.1.tgz",
@@ -2301,38 +2240,16 @@
"dev": true
},
"glob": {
- "version": "7.2.0",
- "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz",
- "integrity": "sha512-lmLf6gtyrPq8tTjSmrO94wBeQbFR3HbLHbuyD69wuyQkImp2hWqMGB47OX65FBkPffO641IP9jWa1z4ivqG26Q==",
+ "version": "8.1.0",
+ "resolved": "https://registry.npmjs.org/glob/-/glob-8.1.0.tgz",
+ "integrity": "sha512-r8hpEjiQEYlF2QU0df3dS+nxxSIreXQS1qRhMJM0Q5NDdR386C7jb7Hwwod8Fgiuex+k0GFjgft18yvxm5XoCQ==",
"dev": true,
"requires": {
"fs.realpath": "^1.0.0",
"inflight": "^1.0.4",
"inherits": "2",
- "minimatch": "^3.0.4",
- "once": "^1.3.0",
- "path-is-absolute": "^1.0.0"
- },
- "dependencies": {
- "brace-expansion": {
- "version": "1.1.11",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
- "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
- "dev": true,
- "requires": {
- "balanced-match": "^1.0.0",
- "concat-map": "0.0.1"
- }
- },
- "minimatch": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
- "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
- "dev": true,
- "requires": {
- "brace-expansion": "^1.1.7"
- }
- }
+ "minimatch": "^5.0.1",
+ "once": "^1.3.0"
}
},
"glob-parent": {
@@ -2529,9 +2446,9 @@
}
},
"mocha": {
- "version": "10.2.0",
- "resolved": "https://registry.npmjs.org/mocha/-/mocha-10.2.0.tgz",
- "integrity": "sha512-IDY7fl/BecMwFHzoqF2sg/SHHANeBoMMXFlS9r0OXKDssYE1M5O43wUY/9BVPeIvfH2zmEbBfseqN9gBQZzXkg==",
+ "version": "10.3.0",
+ "resolved": "https://registry.npmjs.org/mocha/-/mocha-10.3.0.tgz",
+ "integrity": "sha512-uF2XJs+7xSLsrmIvn37i/wnc91nw7XjOQB8ccyx5aEgdnohr7n+rEiZP23WkCYHjilR6+EboEnbq/ZQDz4LSbg==",
"dev": true,
"requires": {
"ansi-colors": "4.1.1",
@@ -2541,14 +2458,13 @@
"diff": "5.0.0",
"escape-string-regexp": "4.0.0",
"find-up": "5.0.0",
- "glob": "7.2.0",
+ "glob": "8.1.0",
"he": "1.2.0",
"js-yaml": "4.1.0",
"log-symbols": "4.1.0",
"minimatch": "5.0.1",
"ms": "2.1.3",
- "nanoid": "3.3.3",
- "serialize-javascript": "6.0.0",
+ "serialize-javascript": "^6.0.2",
"strip-json-comments": "3.1.1",
"supports-color": "8.1.1",
"workerpool": "6.2.1",
@@ -2595,12 +2511,6 @@
"integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
"dev": true
},
- "nanoid": {
- "version": "3.3.3",
- "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.3.tgz",
- "integrity": "sha512-p1sjXuopFs0xg+fPASzQ28agW1oHD7xDsd9Xkf3T15H3c/cifrFHVwrh74PdoklAPi+i7MdRsE47vm2r6JoB+w==",
- "dev": true
- },
"nock": {
"version": "12.0.3",
"resolved": "https://registry.npmjs.org/nock/-/nock-12.0.3.tgz",
@@ -2659,12 +2569,6 @@
"integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
"dev": true
},
- "path-is-absolute": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
- "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==",
- "dev": true
- },
"path-type": {
"version": "4.0.0",
"resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz",
@@ -2741,9 +2645,9 @@
"dev": true
},
"serialize-javascript": {
- "version": "6.0.0",
- "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.0.tgz",
- "integrity": "sha512-Qr3TosvguFt8ePWqsvRfrKyQXIiW+nGbYpy8XK24NQHE83caxWt+mIymTT19DGFbNWNLfEwsrkSmN64lVWB9ag==",
+ "version": "6.0.2",
+ "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
+ "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
"dev": true,
"requires": {
"randombytes": "^2.1.0"
diff --git a/.buildkite/package.json b/.buildkite/package.json
index 0321711b7480..be91750b4e79 100644
--- a/.buildkite/package.json
+++ b/.buildkite/package.json
@@ -6,6 +6,9 @@
"test": "mocha",
"test:watch": "mocha --watch"
},
+ "overrides": {
+ "serialize-javascript": "^6.0.2"
+ },
"dependencies": {
"@octokit/rest": "^18.10.0",
"axios": "^1.6.3",
@@ -21,7 +24,7 @@
"@types/mocha": "^10.0.1",
"@types/node": "^15.12.2",
"chai": "^4.3.10",
- "mocha": "^10.2.0",
+ "mocha": "^10.3.0",
"nock": "^12.0.2",
"ts-node": "^10.7.0",
"typescript": "^4.6.4"
diff --git a/.buildkite/pipelines/emergency_release.yml b/.buildkite/pipelines/emergency_release.yml
index 07ab52417f9a..df9b1dea3cfb 100644
--- a/.buildkite/pipelines/emergency_release.yml
+++ b/.buildkite/pipelines/emergency_release.yml
@@ -1,4 +1,5 @@
env:
+ SKIP_NODE_SETUP: true
VERSION: ${BUILDKITE_COMMIT:0:12}
EMERGENCY_RELEASE_REMOTE_SERVICE_CONFIG: https://raw.githubusercontent.com/elastic/serverless-gitops/main/gen/gpctl/kibana/emergency.yaml
diff --git a/.buildkite/pipelines/es_serverless/emergency_release_branch_testing.yml b/.buildkite/pipelines/es_serverless/emergency_release_branch_testing.yml
index 8fc5da666d56..1952900c1aab 100644
--- a/.buildkite/pipelines/es_serverless/emergency_release_branch_testing.yml
+++ b/.buildkite/pipelines/es_serverless/emergency_release_branch_testing.yml
@@ -9,9 +9,7 @@ notify:
if: "build.state == 'passed' || build.state == 'failed' || build.state == 'scheduled'"
steps:
- - trigger: "kibana-artifacts-container-image"
- label: ":docker: Build Kibana Artifacts Container Image"
- build:
- branch: $BUILDKITE_BRANCH
- commit: $BUILDKITE_COMMIT
- message: Running PR build for $BUILDKITE_BRANCH
+ - command: "ts-node .buildkite/scripts/serverless/emergency_release/trigger_container_build.ts"
+ label: "Trigger container build if there are new commits"
+ env:
+ DRY_RUN: $DRY_RUN
diff --git a/.buildkite/pipelines/quality-gates/pipeline.kibana-tests.yaml b/.buildkite/pipelines/quality-gates/pipeline.kibana-tests.yaml
index 121785327591..c24a1d504cd8 100644
--- a/.buildkite/pipelines/quality-gates/pipeline.kibana-tests.yaml
+++ b/.buildkite/pipelines/quality-gates/pipeline.kibana-tests.yaml
@@ -16,6 +16,7 @@ agents:
memory: "8G"
env:
+ SKIP_NODE_SETUP: true
TEAM_CHANNEL: "#kibana-mission-control"
ENVIRONMENT: ${ENVIRONMENT?}
diff --git a/.buildkite/pipelines/sonarqube.yml b/.buildkite/pipelines/sonarqube.yml
index 827c52815c1f..61e275011140 100644
--- a/.buildkite/pipelines/sonarqube.yml
+++ b/.buildkite/pipelines/sonarqube.yml
@@ -1,3 +1,7 @@
+env:
+ SKIP_NODE_SETUP: true
+
+steps:
- label: ":sonarqube: Continuous Code Inspection"
agents:
image: docker.elastic.co/cloud-ci/sonarqube/buildkite-scanner:latest
diff --git a/.buildkite/scripts/common/env.sh b/.buildkite/scripts/common/env.sh
index 89c9dce5a3b8..0cdd9451171e 100755
--- a/.buildkite/scripts/common/env.sh
+++ b/.buildkite/scripts/common/env.sh
@@ -1,5 +1,7 @@
#!/usr/bin/env bash
+echo '--- Setup environment vars'
+
export CI=true
KIBANA_DIR=$(pwd)
@@ -70,9 +72,6 @@ export TEST_BROWSER_HEADLESS=1
export ELASTIC_APM_ENVIRONMENT=ci
export ELASTIC_APM_TRANSACTION_SAMPLE_RATE=0.1
-export ELASTIC_APM_SERVER_URL=https://kibana-ci-apm.apm.us-central1.gcp.cloud.es.io
-# Not really a secret, if APM supported public auth we would use it and APM requires that we use this name
-export ELASTIC_APM_SECRET_TOKEN=7YKhoXsO4MzjhXjx2c
if is_pr; then
if is_pr_with_label "ci:collect-apm"; then
diff --git a/.buildkite/scripts/common/setup_buildkite_deps.sh b/.buildkite/scripts/common/setup_buildkite_deps.sh
new file mode 100644
index 000000000000..3d826d274694
--- /dev/null
+++ b/.buildkite/scripts/common/setup_buildkite_deps.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+echo '--- Install/build buildkite dependencies'
+
+if [[ "$(type -t retry)" != "function" ]]; then
+ source "$(dirname "${BASH_SOURCE[0]}")/util.sh"
+fi
+
+# `rm -rf ; npm install -g ts-node` will cause ts-node bin files to be messed up
+# but literally just calling `npm install -g ts-node` a second time fixes it
+# this is only on newer versions of npm
+npm_install_global ts-node
+if ! ts-node --version; then
+ npm_install_global ts-node
+ ts-node --version;
+fi
+
+cd '.buildkite'
+retry 5 15 npm ci
+cd -
diff --git a/.buildkite/scripts/common/setup_job_env.sh b/.buildkite/scripts/common/setup_job_env.sh
new file mode 100644
index 000000000000..6b07beebcfa9
--- /dev/null
+++ b/.buildkite/scripts/common/setup_job_env.sh
@@ -0,0 +1,181 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+echo '--- Job Environment Setup'
+
+if [[ "$(type -t vault_get)" != "function" ]]; then
+ source .buildkite/scripts/common/vault_fns.sh
+fi
+
+# Set up general-purpose tokens and credentials
+{
+ BUILDKITE_TOKEN="$(vault_get buildkite-ci buildkite_token_all_jobs)"
+ export BUILDKITE_TOKEN
+
+ GITHUB_TOKEN=$(vault_get kibanamachine github_token)
+ export GITHUB_TOKEN
+
+ KIBANA_CI_GITHUB_TOKEN=$(vault_get kibana-ci-github github_token)
+ export KIBANA_CI_GITHUB_TOKEN
+
+ KIBANA_DOCKER_USERNAME="$(vault_get container-registry username)"
+ export KIBANA_DOCKER_USERNAME
+
+ KIBANA_DOCKER_PASSWORD="$(vault_get container-registry password)"
+ export KIBANA_DOCKER_PASSWORD
+}
+
+# Set up a custom ES Snapshot Manifest if one has been specified for this build
+{
+ ES_SNAPSHOT_MANIFEST=${ES_SNAPSHOT_MANIFEST:-$(buildkite-agent meta-data get ES_SNAPSHOT_MANIFEST --default '')}
+ export ES_SNAPSHOT_MANIFEST
+
+ if [[ "${ES_SNAPSHOT_MANIFEST:-}" ]]; then
+ cat << EOF | buildkite-agent annotate --style "info" --context es-snapshot-manifest
+ This build is running using a custom Elasticsearch snapshot.
+
+ ES Snapshot Manifest: $ES_SNAPSHOT_MANIFEST
+
+ To use this locally, simply prefix your commands with:
+
+ \`\`\`
+ ES_SNAPSHOT_MANIFEST="$ES_SNAPSHOT_MANIFEST"
+ \`\`\`
+
+ e.g.
+
+ \`\`\`
+ ES_SNAPSHOT_MANIFEST="$ES_SNAPSHOT_MANIFEST" node scripts/functional_tests_server.js
+ \`\`\`
+EOF
+ fi
+}
+
+# If a custom manifest isn't specified, then use the default one that we resolve earlier in the build
+{
+ if [[ ! "${ES_SNAPSHOT_MANIFEST:-}" ]]; then
+ ES_SNAPSHOT_MANIFEST=${ES_SNAPSHOT_MANIFEST:-$(buildkite-agent meta-data get ES_SNAPSHOT_MANIFEST_DEFAULT --default '')}
+ export ES_SNAPSHOT_MANIFEST
+ echo "Using default ES Snapshot Manifest: $ES_SNAPSHOT_MANIFEST"
+ fi
+}
+
+# Setup CI Stats
+{
+ CI_STATS_BUILD_ID="$(buildkite-agent meta-data get ci_stats_build_id --default '')"
+ export CI_STATS_BUILD_ID
+
+ CI_STATS_TOKEN="$(vault_get kibana_ci_stats api_token)"
+ export CI_STATS_TOKEN
+
+ CI_STATS_HOST="$(vault_get kibana_ci_stats api_host)"
+ export CI_STATS_HOST
+
+ if [[ "$CI_STATS_BUILD_ID" ]]; then
+ echo "CI Stats Build ID: $CI_STATS_BUILD_ID"
+
+ KIBANA_CI_STATS_CONFIG=$(jq -n \
+ --arg buildId "$CI_STATS_BUILD_ID" \
+ --arg apiUrl "https://$CI_STATS_HOST" \
+ --arg apiToken "$CI_STATS_TOKEN" \
+ '{buildId: $buildId, apiUrl: $apiUrl, apiToken: $apiToken}' \
+ )
+ export KIBANA_CI_STATS_CONFIG
+ fi
+}
+
+# Set up misc keys
+{
+ KIBANA_CI_REPORTER_KEY=$(vault_get kibanamachine-reporter value)
+ export KIBANA_CI_REPORTER_KEY
+
+ EC_API_KEY="$(vault_get kibana-ci-cloud-deploy pr_deploy_api_key)"
+ export EC_API_KEY
+
+ PROJECT_API_KEY="$(vault_get kibana-ci-project-deploy pr_deploy_api_key)"
+ export PROJECT_API_KEY
+
+ PROJECT_API_DOMAIN="$(vault_get kibana-ci-project-deploy pr_deploy_domain)"
+ export PROJECT_API_DOMAIN
+
+ SYNTHETICS_SERVICE_USERNAME="$(vault_get kibana-ci-synthetics-credentials username)"
+ export SYNTHETICS_SERVICE_USERNAME
+
+ SYNTHETICS_SERVICE_PASSWORD="$(vault_get kibana-ci-synthetics-credentials password)"
+ export SYNTHETICS_SERVICE_PASSWORD
+
+ SYNTHETICS_SERVICE_MANIFEST="$(vault_get kibana-ci-synthetics-credentials manifest)"
+ export SYNTHETICS_SERVICE_MANIFEST
+
+ SYNTHETICS_REMOTE_KIBANA_USERNAME="$(vault_get kibana-ci-synthetics-remote-credentials username)"
+ export SYNTHETICS_REMOTE_KIBANA_USERNAME
+
+ SYNTHETICS_REMOTE_KIBANA_PASSWORD="$(vault_get kibana-ci-synthetics-remote-credentials password)"
+ export SYNTHETICS_REMOTE_KIBANA_PASSWORD
+
+ SYNTHETICS_REMOTE_KIBANA_URL=${SYNTHETICS_REMOTE_KIBANA_URL-"$(vault_get kibana-ci-synthetics-remote-credentials url)"}
+ export SYNTHETICS_REMOTE_KIBANA_URL
+
+ DEPLOY_TAGGER_SLACK_WEBHOOK_URL=${DEPLOY_TAGGER_SLACK_WEBHOOK_URL:-"$(vault_get kibana-serverless-release-tools DEPLOY_TAGGER_SLACK_WEBHOOK_URL)"}
+ export DEPLOY_TAGGER_SLACK_WEBHOOK_URL
+
+ SONAR_LOGIN=$(vault_get sonarqube token)
+ export SONAR_LOGIN
+
+ ELASTIC_APM_SERVER_URL=$(vault_get project-kibana-ci-apm apm_server_url)
+ export ELASTIC_APM_SERVER_URL
+
+ ELASTIC_APM_API_KEY=$(vault_get project-kibana-ci-apm apm_server_api_key)
+ export ELASTIC_APM_API_KEY
+}
+
+# Set up GCS Service Account for CDN
+{
+ GCS_SA_CDN_KEY="$(vault_get gcs-sa-cdn-prod key)"
+ export GCS_SA_CDN_KEY
+
+ GCS_SA_CDN_EMAIL="$(vault_get gcs-sa-cdn-prod email)"
+ export GCS_SA_CDN_EMAIL
+
+ GCS_SA_CDN_BUCKET="$(vault_get gcs-sa-cdn-prod bucket)"
+ export GCS_SA_CDN_BUCKET
+
+ GCS_SA_CDN_URL="$(vault_get gcs-sa-cdn-prod cdn)"
+ export GCS_SA_CDN_URL
+}
+
+# Setup Failed Test Reporter Elasticsearch credentials
+{
+ TEST_FAILURES_ES_CLOUD_ID=$(vault_get failed_tests_reporter_es cloud_id)
+ export TEST_FAILURES_ES_CLOUD_ID
+
+ TEST_FAILURES_ES_USERNAME=$(vault_get failed_tests_reporter_es username)
+ export TEST_FAILURES_ES_USERNAME
+
+ TEST_FAILURES_ES_PASSWORD=$(vault_get failed_tests_reporter_es password)
+ export TEST_FAILURES_ES_PASSWORD
+}
+
+# Setup Bazel Remote/Local Cache Credentials
+{
+ BAZEL_LOCAL_DEV_CACHE_CREDENTIALS_FILE="$HOME/.kibana-ci-bazel-remote-cache-local-dev.json"
+ export BAZEL_LOCAL_DEV_CACHE_CREDENTIALS_FILE
+ vault_get kibana-ci-bazel-remote-cache-local-dev service_account_json > "$BAZEL_LOCAL_DEV_CACHE_CREDENTIALS_FILE"
+
+ BAZEL_REMOTE_CACHE_CREDENTIALS_FILE="$HOME/.kibana-ci-bazel-remote-cache-gcs.json"
+ export BAZEL_REMOTE_CACHE_CREDENTIALS_FILE
+ vault_get kibana-ci-bazel-remote-cache-sa-key key | base64 -d > "$BAZEL_REMOTE_CACHE_CREDENTIALS_FILE"
+}
+
+# Setup GCS Service Account Proxy for CI
+{
+ KIBANA_SERVICE_ACCOUNT_PROXY_KEY="$(mktemp -d)/kibana-gcloud-service-account.json"
+ export KIBANA_SERVICE_ACCOUNT_PROXY_KEY
+ vault_get kibana-ci-sa-proxy-key key | base64 -d > "$KIBANA_SERVICE_ACCOUNT_PROXY_KEY"
+}
+
+PIPELINE_PRE_COMMAND=${PIPELINE_PRE_COMMAND:-".buildkite/scripts/lifecycle/pipelines/$BUILDKITE_PIPELINE_SLUG/pre_command.sh"}
+if [[ -f "$PIPELINE_PRE_COMMAND" ]]; then
+ source "$PIPELINE_PRE_COMMAND"
+fi
diff --git a/.buildkite/scripts/lifecycle/post_command.sh b/.buildkite/scripts/lifecycle/post_command.sh
index 91854422855a..218184d36f65 100755
--- a/.buildkite/scripts/lifecycle/post_command.sh
+++ b/.buildkite/scripts/lifecycle/post_command.sh
@@ -6,8 +6,12 @@ echo '--- Log out of gcloud'
./.buildkite/scripts/common/activate_service_account.sh --unset-impersonation || echo "Failed to unset impersonation"
./.buildkite/scripts/common/activate_service_account.sh --logout-gcloud || echo "Failed to log out of gcloud"
-echo '--- Agent Debug Info'
-ts-node .buildkite/scripts/lifecycle/print_agent_links.ts || true
+if [[ "${SKIP_NODE_SETUP:-}" =~ ^(1|true)$ ]]; then
+ echo '--- Skipping Agent Debug Info'
+else
+ echo '--- Agent Debug Info'
+ ts-node .buildkite/scripts/lifecycle/print_agent_links.ts || true
+fi
IS_TEST_EXECUTION_STEP="$(buildkite-agent meta-data get "${BUILDKITE_JOB_ID}_is_test_execution_step" --default '')"
diff --git a/.buildkite/scripts/lifecycle/pre_command.sh b/.buildkite/scripts/lifecycle/pre_command.sh
index 6079df9a9add..0ac12e62a7b0 100755
--- a/.buildkite/scripts/lifecycle/pre_command.sh
+++ b/.buildkite/scripts/lifecycle/pre_command.sh
@@ -3,184 +3,22 @@
set -euo pipefail
source .buildkite/scripts/common/util.sh
-
-echo '--- Setup environment vars'
source .buildkite/scripts/common/env.sh
-source .buildkite/scripts/common/setup_node.sh
-
-BUILDKITE_TOKEN="$(vault_get buildkite-ci buildkite_token_all_jobs)"
-export BUILDKITE_TOKEN
+source .buildkite/scripts/common/setup_job_env.sh
-echo '--- Install/build buildkite dependencies'
+if [[ "${SKIP_NODE_SETUP:-}" =~ ^(1|true)$ ]]; then
+ echo "Skipping node setup (SKIP_NODE_SETUP=$SKIP_NODE_SETUP)"
+else
+ source .buildkite/scripts/common/setup_node.sh
+ source .buildkite/scripts/common/setup_buildkite_deps.sh
-# `rm -rf ; npm install -g ts-node` will cause ts-node bin files to be messed up
-# but literally just calling `npm install -g ts-node` a second time fixes it
-# this is only on newer versions of npm
-npm_install_global ts-node
-if ! ts-node --version; then
- npm_install_global ts-node
- ts-node --version;
+ echo '--- Agent Debug/SSH Info'
+ ts-node .buildkite/scripts/lifecycle/print_agent_links.ts || true
fi
-cd '.buildkite'
-retry 5 15 npm ci
-cd ..
-
-echo '--- Agent Debug/SSH Info'
-ts-node .buildkite/scripts/lifecycle/print_agent_links.ts || true
-
if [[ "$(curl -is metadata.google.internal || true)" ]]; then
echo ""
echo "To SSH into this agent, run:"
echo "gcloud compute ssh --tunnel-through-iap --project elastic-kibana-ci --zone \"$(curl -sH Metadata-Flavor:Google http://metadata.google.internal/computeMetadata/v1/instance/zone)\" \"$(curl -sH Metadata-Flavor:Google http://metadata.google.internal/computeMetadata/v1/instance/name)\""
echo ""
fi
-
-echo '--- Job Environment Setup'
-
-# Set up a custom ES Snapshot Manifest if one has been specified for this build
-{
- ES_SNAPSHOT_MANIFEST=${ES_SNAPSHOT_MANIFEST:-$(buildkite-agent meta-data get ES_SNAPSHOT_MANIFEST --default '')}
- export ES_SNAPSHOT_MANIFEST
-
- if [[ "${ES_SNAPSHOT_MANIFEST:-}" ]]; then
- cat << EOF | buildkite-agent annotate --style "info" --context es-snapshot-manifest
- This build is running using a custom Elasticsearch snapshot.
-
- ES Snapshot Manifest: $ES_SNAPSHOT_MANIFEST
-
- To use this locally, simply prefix your commands with:
-
- \`\`\`
- ES_SNAPSHOT_MANIFEST="$ES_SNAPSHOT_MANIFEST"
- \`\`\`
-
- e.g.
-
- \`\`\`
- ES_SNAPSHOT_MANIFEST="$ES_SNAPSHOT_MANIFEST" node scripts/functional_tests_server.js
- \`\`\`
-EOF
- fi
-}
-
-# If a custom manifest isn't specified, then use the default one that we resolve earlier in the build
-{
- if [[ ! "${ES_SNAPSHOT_MANIFEST:-}" ]]; then
- ES_SNAPSHOT_MANIFEST=${ES_SNAPSHOT_MANIFEST:-$(buildkite-agent meta-data get ES_SNAPSHOT_MANIFEST_DEFAULT --default '')}
- export ES_SNAPSHOT_MANIFEST
- echo "Using default ES Snapshot Manifest: $ES_SNAPSHOT_MANIFEST"
- fi
-}
-
-# Setup CI Stats
-{
- CI_STATS_BUILD_ID="$(buildkite-agent meta-data get ci_stats_build_id --default '')"
- export CI_STATS_BUILD_ID
-
- CI_STATS_TOKEN="$(vault_get kibana_ci_stats api_token)"
- export CI_STATS_TOKEN
-
- CI_STATS_HOST="$(vault_get kibana_ci_stats api_host)"
- export CI_STATS_HOST
-
- if [[ "$CI_STATS_BUILD_ID" ]]; then
- echo "CI Stats Build ID: $CI_STATS_BUILD_ID"
-
- KIBANA_CI_STATS_CONFIG=$(jq -n \
- --arg buildId "$CI_STATS_BUILD_ID" \
- --arg apiUrl "https://$CI_STATS_HOST" \
- --arg apiToken "$CI_STATS_TOKEN" \
- '{buildId: $buildId, apiUrl: $apiUrl, apiToken: $apiToken}' \
- )
- export KIBANA_CI_STATS_CONFIG
- fi
-}
-
-GITHUB_TOKEN=$(vault_get kibanamachine github_token)
-export GITHUB_TOKEN
-
-KIBANA_CI_GITHUB_TOKEN=$(vault_get kibana-ci-github github_token)
-export KIBANA_CI_GITHUB_TOKEN
-
-KIBANA_CI_REPORTER_KEY=$(vault_get kibanamachine-reporter value)
-export KIBANA_CI_REPORTER_KEY
-
-KIBANA_DOCKER_USERNAME="$(vault_get container-registry username)"
-export KIBANA_DOCKER_USERNAME
-
-KIBANA_DOCKER_PASSWORD="$(vault_get container-registry password)"
-export KIBANA_DOCKER_PASSWORD
-
-EC_API_KEY="$(vault_get kibana-ci-cloud-deploy pr_deploy_api_key)"
-export EC_API_KEY
-
-PROJECT_API_KEY="$(vault_get kibana-ci-project-deploy pr_deploy_api_key)"
-export PROJECT_API_KEY
-
-PROJECT_API_DOMAIN="$(vault_get kibana-ci-project-deploy pr_deploy_domain)"
-export PROJECT_API_DOMAIN
-
-SYNTHETICS_SERVICE_USERNAME="$(vault_get kibana-ci-synthetics-credentials username)"
-export SYNTHETICS_SERVICE_USERNAME
-
-SYNTHETICS_SERVICE_PASSWORD="$(vault_get kibana-ci-synthetics-credentials password)"
-export SYNTHETICS_SERVICE_PASSWORD
-
-SYNTHETICS_SERVICE_MANIFEST="$(vault_get kibana-ci-synthetics-credentials manifest)"
-export SYNTHETICS_SERVICE_MANIFEST
-
-SYNTHETICS_REMOTE_KIBANA_USERNAME="$(vault_get kibana-ci-synthetics-remote-credentials username)"
-export SYNTHETICS_REMOTE_KIBANA_USERNAME
-
-SYNTHETICS_REMOTE_KIBANA_PASSWORD="$(vault_get kibana-ci-synthetics-remote-credentials password)"
-export SYNTHETICS_REMOTE_KIBANA_PASSWORD
-
-SYNTHETICS_REMOTE_KIBANA_URL=${SYNTHETICS_REMOTE_KIBANA_URL-"$(vault_get kibana-ci-synthetics-remote-credentials url)"}
-export SYNTHETICS_REMOTE_KIBANA_URL
-
-DEPLOY_TAGGER_SLACK_WEBHOOK_URL=${DEPLOY_TAGGER_SLACK_WEBHOOK_URL:-"$(vault_get kibana-serverless-release-tools DEPLOY_TAGGER_SLACK_WEBHOOK_URL)"}
-export DEPLOY_TAGGER_SLACK_WEBHOOK_URL
-
-GCS_SA_CDN_KEY="$(vault_get gcs-sa-cdn-prod key)"
-export GCS_SA_CDN_KEY
-
-GCS_SA_CDN_EMAIL="$(vault_get gcs-sa-cdn-prod email)"
-export GCS_SA_CDN_EMAIL
-
-GCS_SA_CDN_BUCKET="$(vault_get gcs-sa-cdn-prod bucket)"
-export GCS_SA_CDN_BUCKET
-
-GCS_SA_CDN_URL="$(vault_get gcs-sa-cdn-prod cdn)"
-export GCS_SA_CDN_URL
-
-# Setup Failed Test Reporter Elasticsearch credentials
-{
- TEST_FAILURES_ES_CLOUD_ID=$(vault_get failed_tests_reporter_es cloud_id)
- export TEST_FAILURES_ES_CLOUD_ID
-
- TEST_FAILURES_ES_USERNAME=$(vault_get failed_tests_reporter_es username)
- export TEST_FAILURES_ES_USERNAME
-
- TEST_FAILURES_ES_PASSWORD=$(vault_get failed_tests_reporter_es password)
- export TEST_FAILURES_ES_PASSWORD
-}
-
-BAZEL_LOCAL_DEV_CACHE_CREDENTIALS_FILE="$HOME/.kibana-ci-bazel-remote-cache-local-dev.json"
-export BAZEL_LOCAL_DEV_CACHE_CREDENTIALS_FILE
-vault_get kibana-ci-bazel-remote-cache-local-dev service_account_json > "$BAZEL_LOCAL_DEV_CACHE_CREDENTIALS_FILE"
-
-# Export key for accessing bazel remote cache's GCS bucket
-BAZEL_REMOTE_CACHE_CREDENTIALS_FILE="$HOME/.kibana-ci-bazel-remote-cache-gcs.json"
-export BAZEL_REMOTE_CACHE_CREDENTIALS_FILE
-vault_get kibana-ci-bazel-remote-cache-sa-key key | base64 -d > "$BAZEL_REMOTE_CACHE_CREDENTIALS_FILE"
-
-# Setup GCS Service Account Proxy for CI
-KIBANA_SERVICE_ACCOUNT_PROXY_KEY="$(mktemp -d)/kibana-gcloud-service-account.json"
-export KIBANA_SERVICE_ACCOUNT_PROXY_KEY
-vault_get kibana-ci-sa-proxy-key key | base64 -d > "$KIBANA_SERVICE_ACCOUNT_PROXY_KEY"
-
-PIPELINE_PRE_COMMAND=${PIPELINE_PRE_COMMAND:-".buildkite/scripts/lifecycle/pipelines/$BUILDKITE_PIPELINE_SLUG/pre_command.sh"}
-if [[ -f "$PIPELINE_PRE_COMMAND" ]]; then
- source "$PIPELINE_PRE_COMMAND"
-fi
diff --git a/.buildkite/scripts/serverless/create_deploy_tag/generate_gpctl_trigger.ts b/.buildkite/scripts/serverless/create_deploy_tag/generate_gpctl_trigger.ts
index 8fa778fe8a67..231977979c41 100644
--- a/.buildkite/scripts/serverless/create_deploy_tag/generate_gpctl_trigger.ts
+++ b/.buildkite/scripts/serverless/create_deploy_tag/generate_gpctl_trigger.ts
@@ -20,7 +20,7 @@ async function main() {
function uploadTriggerStep(commitSha: string) {
const triggerStep: BuildkiteTriggerStep = {
- label: ':releasethekaken: Trigger GPCTL / Release Kibana',
+ label: ':ship: Trigger GPCTL / Release Kibana',
trigger: 'gpctl-promote',
async: true,
build: {
diff --git a/.buildkite/scripts/serverless/emergency_release/trigger_container_build.ts b/.buildkite/scripts/serverless/emergency_release/trigger_container_build.ts
new file mode 100644
index 000000000000..daf7c904ffd4
--- /dev/null
+++ b/.buildkite/scripts/serverless/emergency_release/trigger_container_build.ts
@@ -0,0 +1,64 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import { execSync } from 'child_process';
+import { BuildkiteClient, BuildkiteTriggerStep } from '#pipeline-utils';
+
+const DRY_RUN = !!process.env.DRY_RUN?.match(/^(true|1)$/i);
+const buildkite = new BuildkiteClient();
+
+async function main() {
+ const commitSha = process.env.OVERRIDE_COMMIT || process.env.BUILDKITE_COMMIT;
+
+ if (!isCurrentHeadInMain(commitSha!)) {
+ if (!DRY_RUN) {
+ console.log(
+ `DRY_RUN: Commit ${commitSha} isn't in main, triggering container build :green_heart:`
+ );
+ } else {
+ console.log(`Commit ${commitSha} isn't in main, triggering container build :green_heart:`);
+ uploadTriggerBuildStep();
+ }
+ } else {
+ if (!DRY_RUN) {
+ console.log(`DRY_RUN: Commit ${commitSha} is in main, no build necessary :yellow_heart:`);
+ } else {
+ console.log(`Commit ${commitSha} is in main, no trigger necessary :yellow_heart:`);
+ }
+ }
+}
+
+function isCurrentHeadInMain(commitSha: string) {
+ const containmentTest = execSync(
+ `git branch -r --contains '${commitSha}' | grep -E "(upstream|origin)/main" | wc -l`
+ ).toString();
+
+ return parseInt(containmentTest, 10) >= 1;
+}
+
+function uploadTriggerBuildStep() {
+ const triggerStep: BuildkiteTriggerStep = {
+ label: ':point_right: Trigger emergency commit container build',
+ trigger: 'kibana-artifacts-container-image',
+ build: {
+ message: `Triggered by '${process.env.BUILDKITE_PIPELINE_NAME || 'unknown'}'`,
+ env: {},
+ },
+ };
+
+ buildkite.uploadSteps([triggerStep]);
+}
+
+main()
+ .then(() => {
+ console.log('Trigger container build step uploaded.');
+ })
+ .catch((error) => {
+ console.error(error);
+ process.exit(1);
+ });
diff --git a/.buildkite/scripts/steps/code_coverage/reporting/downloadPrevSha.sh b/.buildkite/scripts/steps/code_coverage/reporting/downloadPrevSha.sh
index a0399977457a..6107169c63cb 100755
--- a/.buildkite/scripts/steps/code_coverage/reporting/downloadPrevSha.sh
+++ b/.buildkite/scripts/steps/code_coverage/reporting/downloadPrevSha.sh
@@ -2,13 +2,9 @@
set -euo pipefail
-# TODO: Safe to remove this after 2024-03-01 (https://github.com/elastic/kibana/issues/175904)
-gsutil -m cp -r gs://elastic-bekitzur-kibana-coverage-live/previous_pointer/previous.txt . || echo "### Previous Pointer NOT FOUND?"
-
-# TODO: Activate after the above is removed
-#.buildkite/scripts/common/activate_service_account.sh gs://elastic-kibana-coverage-live
-#gsutil -m cp -r gs://elastic-kibana-coverage-live/previous_pointer/previous.txt . || echo "### Previous Pointer NOT FOUND?"
-#.buildkite/scripts/common/activate_service_account.sh --unset-impersonation
+.buildkite/scripts/common/activate_service_account.sh gs://elastic-kibana-coverage-live
+gsutil -m cp -r gs://elastic-kibana-coverage-live/previous_pointer/previous.txt . || echo "### Previous Pointer NOT FOUND?"
+.buildkite/scripts/common/activate_service_account.sh --unset-impersonation
if [ -e ./previous.txt ]; then
mv previous.txt downloaded_previous.txt
diff --git a/.buildkite/scripts/steps/code_coverage/reporting/uploadPrevSha.sh b/.buildkite/scripts/steps/code_coverage/reporting/uploadPrevSha.sh
index 2164a4cd6425..18f41bdba64a 100755
--- a/.buildkite/scripts/steps/code_coverage/reporting/uploadPrevSha.sh
+++ b/.buildkite/scripts/steps/code_coverage/reporting/uploadPrevSha.sh
@@ -9,9 +9,6 @@ collectPrevious() {
}
collectPrevious
-# TODO: Safe to remove this after 2024-03-01 (https://github.com/elastic/kibana/issues/175904)
-gsutil cp previous.txt gs://elastic-bekitzur-kibana-coverage-live/previous_pointer/
-
.buildkite/scripts/common/activate_service_account.sh gs://elastic-kibana-coverage-live
gsutil cp previous.txt gs://elastic-kibana-coverage-live/previous_pointer/
.buildkite/scripts/common/activate_service_account.sh --unset-impersonation
diff --git a/.buildkite/scripts/steps/code_coverage/reporting/uploadStaticSite.sh b/.buildkite/scripts/steps/code_coverage/reporting/uploadStaticSite.sh
index 701704a3a8b2..ba3b86fed9d3 100755
--- a/.buildkite/scripts/steps/code_coverage/reporting/uploadStaticSite.sh
+++ b/.buildkite/scripts/steps/code_coverage/reporting/uploadStaticSite.sh
@@ -4,25 +4,8 @@ set -euo pipefail
xs=("$@")
-# TODO: Safe to remove this block after 2024-03-01 (https://github.com/elastic/kibana/issues/175904) - also clean up usages
-echo "--- Uploading static site (legacy)"
-uploadPrefix_old="gs://elastic-bekitzur-kibana-coverage-live/"
-uploadPrefixWithTimeStamp_old="${uploadPrefix_old}${TIME_STAMP}/"
-uploadBase_old() {
- for x in 'src/dev/code_coverage/www/index.html' 'src/dev/code_coverage/www/404.html'; do
- gsutil -m -q cp -r -a public-read -z js,css,html "${x}" "${uploadPrefix_old}"
- done
-}
-uploadRest_old() {
- for x in "${xs[@]}"; do
- gsutil -m -q cp -r -a public-read -z js,css,html "target/kibana-coverage/${x}-combined" "${uploadPrefixWithTimeStamp_old}"
- done
-}
-.buildkite/scripts/common/activate_service_account.sh --logout-gcloud
-uploadBase_old
-uploadRest_old
-
echo "--- Uploading static site"
+
uploadPrefix="gs://elastic-kibana-coverage-live/"
uploadPrefixWithTimeStamp="${uploadPrefix}${TIME_STAMP}/"
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 7ff008e0356d..d37047a85383 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -569,6 +569,7 @@ test/common/plugins/newsfeed @elastic/kibana-core
src/plugins/no_data_page @elastic/appex-sharedux
x-pack/plugins/notifications @elastic/appex-sharedux
packages/kbn-object-versioning @elastic/appex-sharedux
+x-pack/plugins/observability_solution/observability_ai_assistant_app @elastic/obs-knowledge-team
x-pack/plugins/observability_solution/observability_ai_assistant @elastic/obs-knowledge-team
x-pack/packages/observability/alert_details @elastic/obs-ux-management-team
x-pack/packages/observability/alerting_test_data @elastic/obs-ux-management-team
@@ -1055,7 +1056,6 @@ x-pack/plugins/observability_solution/infra/server/lib/alerting @elastic/obs-ux-
/x-pack/test/functional/apps/monitoring @elastic/obs-ux-infra_services-team @elastic/stack-monitoring
/x-pack/test/api_integration/apis/monitoring @elastic/obs-ux-infra_services-team @elastic/stack-monitoring
/x-pack/test/api_integration/apis/monitoring_collection @elastic/obs-ux-infra_services-team @elastic/stack-monitoring
-/x-pack/test_serverless/functional/test_suites/observability/observability_logs_explorer @elastic/obs-ux-logs-team
# Fleet
/fleet_packages.json @elastic/fleet
@@ -1086,7 +1086,11 @@ x-pack/plugins/observability_solution/infra/server/lib/alerting @elastic/obs-ux-
# Logs
/x-pack/test/api_integration/apis/logs_ui @elastic/obs-ux-logs-team
+/x-pack/test/dataset_quality_api_integration @elastic/obs-ux-logs-team
/x-pack/test/functional/apps/observability_logs_explorer @elastic/obs-ux-logs-team
+/x-pack/test_serverless/functional/test_suites/observability/observability_logs_explorer @elastic/obs-ux-logs-team
+/x-pack/test/functional/apps/dataset_quality @elastic/obs-ux-logs-team
+/x-pack/test_serverless/functional/test_suites/observability/dataset_quality @elastic/obs-ux-logs-team
# Observability onboarding tour
/x-pack/plugins/observability_solution/observability_shared/public/components/tour @elastic/platform-onboarding
diff --git a/api_docs/actions.devdocs.json b/api_docs/actions.devdocs.json
index 4fd722c036e8..fa2885287bbc 100644
--- a/api_docs/actions.devdocs.json
+++ b/api_docs/actions.devdocs.json
@@ -2682,6 +2682,61 @@
"trackAdoption": false
}
]
+ },
+ {
+ "parentPluginId": "actions",
+ "id": "def-server.ActionType.getService",
+ "type": "Function",
+ "tags": [],
+ "label": "getService",
+ "description": [],
+ "signature": [
+ "((params: ",
+ {
+ "pluginId": "actions",
+ "scope": "server",
+ "docId": "kibActionsPluginApi",
+ "section": "def-server.ServiceParams",
+ "text": "ServiceParams"
+ },
+ ") => ",
+ {
+ "pluginId": "actions",
+ "scope": "server",
+ "docId": "kibActionsPluginApi",
+ "section": "def-server.SubActionConnector",
+ "text": "SubActionConnector"
+ },
+ ") | undefined"
+ ],
+ "path": "x-pack/plugins/actions/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "actions",
+ "id": "def-server.ActionType.getService.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "params",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "actions",
+ "scope": "server",
+ "docId": "kibActionsPluginApi",
+ "section": "def-server.ServiceParams",
+ "text": "ServiceParams"
+ },
+ ""
+ ],
+ "path": "x-pack/plugins/actions/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
}
],
"initialIsOpen": false
diff --git a/api_docs/actions.mdx b/api_docs/actions.mdx
index 6c84218b3500..5537dd212e59 100644
--- a/api_docs/actions.mdx
+++ b/api_docs/actions.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/actions
title: "actions"
image: https://source.unsplash.com/400x175/?github
description: API docs for the actions plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'actions']
---
import actionsObj from './actions.devdocs.json';
@@ -21,7 +21,7 @@ Contact [@elastic/response-ops](https://github.com/orgs/elastic/teams/response-o
| Public API count | Any count | Items lacking comments | Missing exports |
|-------------------|-----------|------------------------|-----------------|
-| 279 | 0 | 273 | 31 |
+| 281 | 0 | 275 | 31 |
## Client
diff --git a/api_docs/advanced_settings.mdx b/api_docs/advanced_settings.mdx
index 1369bff2ff25..6a2a3ea26ff7 100644
--- a/api_docs/advanced_settings.mdx
+++ b/api_docs/advanced_settings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/advancedSettings
title: "advancedSettings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the advancedSettings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'advancedSettings']
---
import advancedSettingsObj from './advanced_settings.devdocs.json';
diff --git a/api_docs/ai_assistant_management_observability.mdx b/api_docs/ai_assistant_management_observability.mdx
index 5ba561f0ce7f..52338cc79d08 100644
--- a/api_docs/ai_assistant_management_observability.mdx
+++ b/api_docs/ai_assistant_management_observability.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/aiAssistantManagementObservability
title: "aiAssistantManagementObservability"
image: https://source.unsplash.com/400x175/?github
description: API docs for the aiAssistantManagementObservability plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'aiAssistantManagementObservability']
---
import aiAssistantManagementObservabilityObj from './ai_assistant_management_observability.devdocs.json';
diff --git a/api_docs/ai_assistant_management_selection.mdx b/api_docs/ai_assistant_management_selection.mdx
index 768fae761989..e612a3d95494 100644
--- a/api_docs/ai_assistant_management_selection.mdx
+++ b/api_docs/ai_assistant_management_selection.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/aiAssistantManagementSelection
title: "aiAssistantManagementSelection"
image: https://source.unsplash.com/400x175/?github
description: API docs for the aiAssistantManagementSelection plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'aiAssistantManagementSelection']
---
import aiAssistantManagementSelectionObj from './ai_assistant_management_selection.devdocs.json';
diff --git a/api_docs/aiops.mdx b/api_docs/aiops.mdx
index 97e7a2014401..179b491661a1 100644
--- a/api_docs/aiops.mdx
+++ b/api_docs/aiops.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/aiops
title: "aiops"
image: https://source.unsplash.com/400x175/?github
description: API docs for the aiops plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'aiops']
---
import aiopsObj from './aiops.devdocs.json';
diff --git a/api_docs/alerting.mdx b/api_docs/alerting.mdx
index e04b3283ad3a..682853229d16 100644
--- a/api_docs/alerting.mdx
+++ b/api_docs/alerting.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/alerting
title: "alerting"
image: https://source.unsplash.com/400x175/?github
description: API docs for the alerting plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'alerting']
---
import alertingObj from './alerting.devdocs.json';
diff --git a/api_docs/apm.devdocs.json b/api_docs/apm.devdocs.json
index bfdec5f3ee2e..b7cac2784d10 100644
--- a/api_docs/apm.devdocs.json
+++ b/api_docs/apm.devdocs.json
@@ -418,7 +418,7 @@
"label": "APIEndpoint",
"description": [],
"signature": [
- "\"POST /internal/apm/data_view/static\" | \"GET /internal/apm/data_view/index_pattern\" | \"GET /internal/apm/environments\" | \"GET /internal/apm/services/{serviceName}/errors/groups/main_statistics\" | \"GET /internal/apm/services/{serviceName}/errors/groups/main_statistics_by_transaction_name\" | \"POST /internal/apm/services/{serviceName}/errors/groups/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/errors/{groupId}/samples\" | \"GET /internal/apm/services/{serviceName}/errors/{groupId}/error/{errorId}\" | \"GET /internal/apm/services/{serviceName}/errors/distribution\" | \"GET /internal/apm/services/{serviceName}/errors/{groupId}/top_erroneous_transactions\" | \"POST /internal/apm/latency/overall_distribution/transactions\" | \"GET /internal/apm/services/{serviceName}/metrics/charts\" | \"GET /internal/apm/services/{serviceName}/metrics/nodes\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/charts\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/summary\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/functions_overview\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/active_instances\" | \"GET /internal/apm/observability_overview\" | \"GET /internal/apm/observability_overview/has_data\" | \"GET /internal/apm/service-map\" | \"GET /internal/apm/service-map/service/{serviceName}\" | \"GET /internal/apm/service-map/dependency\" | \"GET /internal/apm/services\" | \"POST /internal/apm/services/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/metadata/details\" | \"GET /internal/apm/services/{serviceName}/metadata/icons\" | \"GET /internal/apm/services/{serviceName}/agent\" | \"GET /internal/apm/services/{serviceName}/transaction_types\" | \"GET /internal/apm/services/{serviceName}/node/{serviceNodeName}/metadata\" | \"GET /api/apm/services/{serviceName}/annotation/search 2023-10-31\" | \"POST /api/apm/services/{serviceName}/annotation 2023-10-31\" | \"GET /internal/apm/services/{serviceName}/service_overview_instances/details/{serviceNodeName}\" | \"GET /internal/apm/services/{serviceName}/throughput\" | \"GET /internal/apm/services/{serviceName}/service_overview_instances/main_statistics\" | \"GET /internal/apm/services/{serviceName}/service_overview_instances/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/dependencies\" | \"GET /internal/apm/services/{serviceName}/dependencies/breakdown\" | \"GET /internal/apm/services/{serviceName}/anomaly_charts\" | \"GET /internal/apm/services/{serviceName}/alerts_count\" | \"GET /internal/apm/service-groups\" | \"GET /internal/apm/service-group\" | \"POST /internal/apm/service-group\" | \"DELETE /internal/apm/service-group\" | \"GET /internal/apm/service-group/services\" | \"GET /internal/apm/service-group/counts\" | \"GET /internal/apm/suggestions\" | \"GET /internal/apm/traces/{traceId}\" | \"GET /internal/apm/traces\" | \"GET /internal/apm/traces/{traceId}/root_transaction\" | \"GET /internal/apm/transactions/{transactionId}\" | \"GET /internal/apm/traces/find\" | \"POST /internal/apm/traces/aggregated_critical_path\" | \"GET /internal/apm/traces/{traceId}/transactions/{transactionId}\" | \"GET /internal/apm/traces/{traceId}/spans/{spanId}\" | \"GET /internal/apm/services/{serviceName}/transactions/groups/main_statistics\" | \"GET /internal/apm/services/{serviceName}/transactions/groups/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/latency\" | \"GET /internal/apm/services/{serviceName}/transactions/traces/samples\" | \"GET /internal/apm/services/{serviceName}/transaction/charts/breakdown\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/error_rate\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/coldstart_rate\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/coldstart_rate_by_transaction_name\" | \"GET /internal/apm/rule_types/transaction_error_rate/chart_preview\" | \"GET /internal/apm/rule_types/error_count/chart_preview\" | \"GET /internal/apm/rule_types/transaction_duration/chart_preview\" | \"GET /api/apm/settings/agent-configuration 2023-10-31\" | \"GET /api/apm/settings/agent-configuration/view 2023-10-31\" | \"DELETE /api/apm/settings/agent-configuration 2023-10-31\" | \"PUT /api/apm/settings/agent-configuration 2023-10-31\" | \"POST /api/apm/settings/agent-configuration/search 2023-10-31\" | \"GET /api/apm/settings/agent-configuration/environments 2023-10-31\" | \"GET /api/apm/settings/agent-configuration/agent_name 2023-10-31\" | \"GET /internal/apm/settings/anomaly-detection/jobs\" | \"POST /internal/apm/settings/anomaly-detection/jobs\" | \"GET /internal/apm/settings/anomaly-detection/environments\" | \"POST /internal/apm/settings/anomaly-detection/update_to_v3\" | \"GET /internal/apm/settings/apm-index-settings\" | \"GET /internal/apm/settings/apm-indices\" | \"POST /internal/apm/settings/apm-indices/save\" | \"GET /internal/apm/settings/custom_links/transaction\" | \"GET /internal/apm/settings/custom_links\" | \"POST /internal/apm/settings/custom_links\" | \"PUT /internal/apm/settings/custom_links/{id}\" | \"DELETE /internal/apm/settings/custom_links/{id}\" | \"GET /api/apm/sourcemaps 2023-10-31\" | \"POST /api/apm/sourcemaps 2023-10-31\" | \"DELETE /api/apm/sourcemaps/{id} 2023-10-31\" | \"POST /internal/apm/sourcemaps/migrate_fleet_artifacts\" | \"GET /internal/apm/fleet/has_apm_policies\" | \"GET /internal/apm/fleet/agents\" | \"POST /api/apm/fleet/apm_server_schema 2023-10-31\" | \"GET /internal/apm/fleet/apm_server_schema/unsupported\" | \"GET /internal/apm/fleet/migration_check\" | \"POST /internal/apm/fleet/cloud_apm_package_policy\" | \"GET /internal/apm/fleet/java_agent_versions\" | \"GET /internal/apm/dependencies/top_dependencies\" | \"GET /internal/apm/dependencies/upstream_services\" | \"GET /internal/apm/dependencies/metadata\" | \"GET /internal/apm/dependencies/charts/latency\" | \"GET /internal/apm/dependencies/charts/throughput\" | \"GET /internal/apm/dependencies/charts/error_rate\" | \"GET /internal/apm/dependencies/operations\" | \"GET /internal/apm/dependencies/charts/distribution\" | \"GET /internal/apm/dependencies/operations/spans\" | \"GET /internal/apm/correlations/field_candidates/transactions\" | \"GET /internal/apm/correlations/field_value_stats/transactions\" | \"POST /internal/apm/correlations/field_value_pairs/transactions\" | \"POST /internal/apm/correlations/significant_correlations/transactions\" | \"POST /internal/apm/correlations/p_values/transactions\" | \"GET /internal/apm/fallback_to_transactions\" | \"GET /internal/apm/has_data\" | \"GET /internal/apm/event_metadata/{processorEvent}/{id}\" | \"GET /internal/apm/agent_keys\" | \"GET /internal/apm/agent_keys/privileges\" | \"POST /internal/apm/api_key/invalidate\" | \"POST /api/apm/agent_keys 2023-10-31\" | \"GET /internal/apm/storage_explorer\" | \"GET /internal/apm/services/{serviceName}/storage_details\" | \"GET /internal/apm/storage_chart\" | \"GET /internal/apm/storage_explorer/privileges\" | \"GET /internal/apm/storage_explorer_summary_stats\" | \"GET /internal/apm/storage_explorer/is_cross_cluster_search\" | \"GET /internal/apm/storage_explorer/get_services\" | \"GET /internal/apm/traces/{traceId}/span_links/{spanId}/parents\" | \"GET /internal/apm/traces/{traceId}/span_links/{spanId}/children\" | \"GET /internal/apm/services/{serviceName}/infrastructure_attributes\" | \"GET /internal/apm/debug-telemetry\" | \"GET /internal/apm/time_range_metadata\" | \"GET /internal/apm/settings/labs\" | \"GET /internal/apm/get_agents_per_service\" | \"GET /internal/apm/get_latest_agent_versions\" | \"GET /internal/apm/services/{serviceName}/agent_instances\" | \"GET /internal/apm/mobile-services/{serviceName}/error/http_error_rate\" | \"GET /internal/apm/mobile-services/{serviceName}/errors/groups/main_statistics\" | \"POST /internal/apm/mobile-services/{serviceName}/errors/groups/detailed_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/error_terms\" | \"POST /internal/apm/mobile-services/{serviceName}/crashes/groups/detailed_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/crashes/groups/main_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/crashes/distribution\" | \"GET /internal/apm/services/{serviceName}/mobile/filters\" | \"GET /internal/apm/mobile-services/{serviceName}/most_used_charts\" | \"GET /internal/apm/mobile-services/{serviceName}/transactions/charts/sessions\" | \"GET /internal/apm/mobile-services/{serviceName}/transactions/charts/http_requests\" | \"GET /internal/apm/mobile-services/{serviceName}/stats\" | \"GET /internal/apm/mobile-services/{serviceName}/location/stats\" | \"GET /internal/apm/mobile-services/{serviceName}/terms\" | \"GET /internal/apm/mobile-services/{serviceName}/main_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/detailed_statistics\" | \"GET /internal/apm/diagnostics\" | \"POST /internal/apm/assistant/get_apm_timeseries\" | \"GET /internal/apm/assistant/get_service_summary\" | \"POST /internal/apm/assistant/get_correlation_values\" | \"GET /internal/apm/assistant/get_downstream_dependencies\" | \"GET /internal/apm/services/{serviceName}/profiling/flamegraph\" | \"GET /internal/apm/profiling/status\" | \"GET /internal/apm/services/{serviceName}/profiling/functions\" | \"GET /internal/apm/services/{serviceName}/transactions/flamegraph\" | \"GET /internal/apm/services/{serviceName}/transactions/functions\" | \"POST /internal/apm/custom-dashboard\" | \"DELETE /internal/apm/custom-dashboard\" | \"GET /internal/apm/services/{serviceName}/dashboards\""
+ "\"POST /internal/apm/data_view/static\" | \"GET /internal/apm/data_view/index_pattern\" | \"GET /internal/apm/environments\" | \"GET /internal/apm/services/{serviceName}/errors/groups/main_statistics\" | \"GET /internal/apm/services/{serviceName}/errors/groups/main_statistics_by_transaction_name\" | \"POST /internal/apm/services/{serviceName}/errors/groups/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/errors/{groupId}/samples\" | \"GET /internal/apm/services/{serviceName}/errors/{groupId}/error/{errorId}\" | \"GET /internal/apm/services/{serviceName}/errors/distribution\" | \"GET /internal/apm/services/{serviceName}/errors/{groupId}/top_erroneous_transactions\" | \"POST /internal/apm/latency/overall_distribution/transactions\" | \"GET /internal/apm/services/{serviceName}/metrics/charts\" | \"GET /internal/apm/services/{serviceName}/metrics/nodes\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/charts\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/summary\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/functions_overview\" | \"GET /internal/apm/services/{serviceName}/metrics/serverless/active_instances\" | \"GET /internal/apm/observability_overview\" | \"GET /internal/apm/observability_overview/has_data\" | \"GET /internal/apm/service-map\" | \"GET /internal/apm/service-map/service/{serviceName}\" | \"GET /internal/apm/service-map/dependency\" | \"GET /internal/apm/services\" | \"POST /internal/apm/services/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/metadata/details\" | \"GET /internal/apm/services/{serviceName}/metadata/icons\" | \"GET /internal/apm/services/{serviceName}/agent\" | \"GET /internal/apm/services/{serviceName}/transaction_types\" | \"GET /internal/apm/services/{serviceName}/node/{serviceNodeName}/metadata\" | \"GET /api/apm/services/{serviceName}/annotation/search 2023-10-31\" | \"POST /api/apm/services/{serviceName}/annotation 2023-10-31\" | \"GET /internal/apm/services/{serviceName}/service_overview_instances/details/{serviceNodeName}\" | \"GET /internal/apm/services/{serviceName}/throughput\" | \"GET /internal/apm/services/{serviceName}/service_overview_instances/main_statistics\" | \"GET /internal/apm/services/{serviceName}/service_overview_instances/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/dependencies\" | \"GET /internal/apm/services/{serviceName}/dependencies/breakdown\" | \"GET /internal/apm/services/{serviceName}/anomaly_charts\" | \"GET /internal/apm/services/{serviceName}/alerts_count\" | \"GET /internal/apm/service-groups\" | \"GET /internal/apm/service-group\" | \"POST /internal/apm/service-group\" | \"DELETE /internal/apm/service-group\" | \"GET /internal/apm/service-group/services\" | \"GET /internal/apm/service-group/counts\" | \"GET /internal/apm/suggestions\" | \"GET /internal/apm/traces/{traceId}\" | \"GET /internal/apm/traces\" | \"GET /internal/apm/traces/{traceId}/root_transaction\" | \"GET /internal/apm/transactions/{transactionId}\" | \"GET /internal/apm/traces/find\" | \"POST /internal/apm/traces/aggregated_critical_path\" | \"GET /internal/apm/traces/{traceId}/transactions/{transactionId}\" | \"GET /internal/apm/traces/{traceId}/spans/{spanId}\" | \"GET /internal/apm/services/{serviceName}/transactions/groups/main_statistics\" | \"GET /internal/apm/services/{serviceName}/transactions/groups/detailed_statistics\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/latency\" | \"GET /internal/apm/services/{serviceName}/transactions/traces/samples\" | \"GET /internal/apm/services/{serviceName}/transaction/charts/breakdown\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/error_rate\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/coldstart_rate\" | \"GET /internal/apm/services/{serviceName}/transactions/charts/coldstart_rate_by_transaction_name\" | \"GET /internal/apm/rule_types/transaction_error_rate/chart_preview\" | \"GET /internal/apm/rule_types/error_count/chart_preview\" | \"GET /internal/apm/rule_types/transaction_duration/chart_preview\" | \"GET /api/apm/settings/agent-configuration 2023-10-31\" | \"GET /api/apm/settings/agent-configuration/view 2023-10-31\" | \"DELETE /api/apm/settings/agent-configuration 2023-10-31\" | \"PUT /api/apm/settings/agent-configuration 2023-10-31\" | \"POST /api/apm/settings/agent-configuration/search 2023-10-31\" | \"GET /api/apm/settings/agent-configuration/environments 2023-10-31\" | \"GET /api/apm/settings/agent-configuration/agent_name 2023-10-31\" | \"GET /internal/apm/settings/anomaly-detection/jobs\" | \"POST /internal/apm/settings/anomaly-detection/jobs\" | \"GET /internal/apm/settings/anomaly-detection/environments\" | \"POST /internal/apm/settings/anomaly-detection/update_to_v3\" | \"GET /internal/apm/settings/apm-index-settings\" | \"GET /internal/apm/settings/apm-indices\" | \"POST /internal/apm/settings/apm-indices/save\" | \"GET /internal/apm/settings/custom_links/transaction\" | \"GET /internal/apm/settings/custom_links\" | \"POST /internal/apm/settings/custom_links\" | \"PUT /internal/apm/settings/custom_links/{id}\" | \"DELETE /internal/apm/settings/custom_links/{id}\" | \"GET /api/apm/sourcemaps 2023-10-31\" | \"POST /api/apm/sourcemaps 2023-10-31\" | \"DELETE /api/apm/sourcemaps/{id} 2023-10-31\" | \"POST /internal/apm/sourcemaps/migrate_fleet_artifacts\" | \"GET /internal/apm/fleet/has_apm_policies\" | \"GET /internal/apm/fleet/agents\" | \"POST /api/apm/fleet/apm_server_schema 2023-10-31\" | \"GET /internal/apm/fleet/apm_server_schema/unsupported\" | \"GET /internal/apm/fleet/migration_check\" | \"POST /internal/apm/fleet/cloud_apm_package_policy\" | \"GET /internal/apm/fleet/java_agent_versions\" | \"GET /internal/apm/dependencies/top_dependencies\" | \"GET /internal/apm/dependencies/upstream_services\" | \"GET /internal/apm/dependencies/metadata\" | \"GET /internal/apm/dependencies/charts/latency\" | \"GET /internal/apm/dependencies/charts/throughput\" | \"GET /internal/apm/dependencies/charts/error_rate\" | \"GET /internal/apm/dependencies/operations\" | \"GET /internal/apm/dependencies/charts/distribution\" | \"GET /internal/apm/dependencies/operations/spans\" | \"GET /internal/apm/correlations/field_candidates/transactions\" | \"GET /internal/apm/correlations/field_value_stats/transactions\" | \"POST /internal/apm/correlations/field_value_pairs/transactions\" | \"POST /internal/apm/correlations/significant_correlations/transactions\" | \"POST /internal/apm/correlations/p_values/transactions\" | \"GET /internal/apm/fallback_to_transactions\" | \"GET /internal/apm/has_data\" | \"GET /internal/apm/event_metadata/{processorEvent}/{id}\" | \"GET /internal/apm/agent_keys\" | \"GET /internal/apm/agent_keys/privileges\" | \"POST /internal/apm/api_key/invalidate\" | \"POST /api/apm/agent_keys 2023-10-31\" | \"GET /internal/apm/storage_explorer\" | \"GET /internal/apm/services/{serviceName}/storage_details\" | \"GET /internal/apm/storage_chart\" | \"GET /internal/apm/storage_explorer/privileges\" | \"GET /internal/apm/storage_explorer_summary_stats\" | \"GET /internal/apm/storage_explorer/is_cross_cluster_search\" | \"GET /internal/apm/storage_explorer/get_services\" | \"GET /internal/apm/traces/{traceId}/span_links/{spanId}/parents\" | \"GET /internal/apm/traces/{traceId}/span_links/{spanId}/children\" | \"GET /internal/apm/services/{serviceName}/infrastructure_attributes\" | \"GET /internal/apm/debug-telemetry\" | \"GET /internal/apm/time_range_metadata\" | \"GET /internal/apm/settings/labs\" | \"GET /internal/apm/get_agents_per_service\" | \"GET /internal/apm/get_latest_agent_versions\" | \"GET /internal/apm/services/{serviceName}/agent_instances\" | \"GET /internal/apm/mobile-services/{serviceName}/error/http_error_rate\" | \"GET /internal/apm/mobile-services/{serviceName}/errors/groups/main_statistics\" | \"POST /internal/apm/mobile-services/{serviceName}/errors/groups/detailed_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/error_terms\" | \"POST /internal/apm/mobile-services/{serviceName}/crashes/groups/detailed_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/crashes/groups/main_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/crashes/distribution\" | \"GET /internal/apm/services/{serviceName}/mobile/filters\" | \"GET /internal/apm/mobile-services/{serviceName}/most_used_charts\" | \"GET /internal/apm/mobile-services/{serviceName}/transactions/charts/sessions\" | \"GET /internal/apm/mobile-services/{serviceName}/transactions/charts/http_requests\" | \"GET /internal/apm/mobile-services/{serviceName}/stats\" | \"GET /internal/apm/mobile-services/{serviceName}/location/stats\" | \"GET /internal/apm/mobile-services/{serviceName}/terms\" | \"GET /internal/apm/mobile-services/{serviceName}/main_statistics\" | \"GET /internal/apm/mobile-services/{serviceName}/detailed_statistics\" | \"GET /internal/apm/diagnostics\" | \"POST /internal/apm/assistant/get_apm_timeseries\" | \"GET /internal/apm/assistant/get_service_summary\" | \"POST /internal/apm/assistant/get_correlation_values\" | \"GET /internal/apm/assistant/get_downstream_dependencies\" | \"GET /internal/apm/services/{serviceName}/profiling/flamegraph\" | \"GET /internal/apm/profiling/status\" | \"GET /internal/apm/services/{serviceName}/profiling/functions\" | \"GET /internal/apm/services/{serviceName}/profiling/hosts/flamegraph\" | \"GET /internal/apm/services/{serviceName}/profiling/hosts/functions\" | \"POST /internal/apm/custom-dashboard\" | \"DELETE /internal/apm/custom-dashboard\" | \"GET /internal/apm/services/{serviceName}/dashboards\""
],
"path": "x-pack/plugins/observability_solution/apm/server/routes/apm_routes/get_global_apm_server_route_repository.ts",
"deprecated": false,
@@ -523,7 +523,7 @@
"SavedApmCustomDashboard",
">; } & ",
"APMRouteCreateOptions",
- "; \"GET /internal/apm/services/{serviceName}/transactions/functions\": { endpoint: \"GET /internal/apm/services/{serviceName}/transactions/functions\"; params?: ",
+ "; \"GET /internal/apm/services/{serviceName}/profiling/hosts/functions\": { endpoint: \"GET /internal/apm/services/{serviceName}/profiling/hosts/functions\"; params?: ",
"TypeC",
"<{ path: ",
"TypeC",
@@ -533,6 +533,12 @@
"IntersectionC",
"<[",
"TypeC",
+ "<{ start: ",
+ "Type",
+ "; end: ",
+ "Type",
+ "; }>, ",
+ "TypeC",
"<{ environment: ",
"UnionC",
"<[",
@@ -553,25 +559,51 @@
},
">]>; }>, ",
"TypeC",
- "<{ start: ",
- "Type",
- "; end: ",
- "Type",
- "; startIndex: ",
+ "<{ documentType: ",
+ "UnionC",
+ "<[",
+ "LiteralC",
+ "<",
+ "ApmDocumentType",
+ ".ServiceTransactionMetric>, ",
+ "LiteralC",
+ "<",
+ "ApmDocumentType",
+ ".TransactionMetric>, ",
+ "LiteralC",
+ "<",
+ "ApmDocumentType",
+ ".TransactionEvent>]>; rollupInterval: ",
+ "UnionC",
+ "<[",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".OneMinute>, ",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".TenMinutes>, ",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".SixtyMinutes>, ",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".None>]>; }>, ",
+ "TypeC",
+ "<{ startIndex: ",
"Type",
"; endIndex: ",
"Type",
- "; transactionName: ",
- "StringC",
- "; transactionType: ",
- "StringC",
- "; }>, ",
+ "; }>, ",
"TypeC",
"<{ kuery: ",
"StringC",
"; }>]>; }> | undefined; handler: ({}: ",
"APMRouteHandlerResources",
- " & { params: { path: { serviceName: string; }; query: { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
+ " & { params: { path: { serviceName: string; }; query: { start: number; end: number; } & { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
"Branded",
"; } & { start: number; end: number; startIndex: number; endIndex: number; transactionName: string; transactionType: string; } & { kuery: string; }; }; }) => Promise<",
+ ">; } & { documentType: ",
+ "ApmDocumentType",
+ ".TransactionMetric | ",
+ "ApmDocumentType",
+ ".ServiceTransactionMetric | ",
+ "ApmDocumentType",
+ ".TransactionEvent; rollupInterval: ",
+ "RollupInterval",
+ "; } & { startIndex: number; endIndex: number; } & { kuery: string; }; }; }) => Promise<{ functions: ",
{
"pluginId": "@kbn/profiling-utils",
"scope": "common",
@@ -589,9 +629,9 @@
"section": "def-common.TopNFunctions",
"text": "TopNFunctions"
},
- " | undefined>; } & ",
+ "; hostNames: string[]; } | undefined>; } & ",
"APMRouteCreateOptions",
- "; \"GET /internal/apm/services/{serviceName}/transactions/flamegraph\": { endpoint: \"GET /internal/apm/services/{serviceName}/transactions/flamegraph\"; params?: ",
+ "; \"GET /internal/apm/services/{serviceName}/profiling/hosts/flamegraph\": { endpoint: \"GET /internal/apm/services/{serviceName}/profiling/hosts/flamegraph\"; params?: ",
"TypeC",
"<{ path: ",
"TypeC",
@@ -601,9 +641,11 @@
"IntersectionC",
"<[",
"TypeC",
- "<{ kuery: ",
- "StringC",
- "; }>, ",
+ "<{ start: ",
+ "Type",
+ "; end: ",
+ "Type",
+ "; }>, ",
"TypeC",
"<{ environment: ",
"UnionC",
@@ -625,17 +667,45 @@
},
">]>; }>, ",
"TypeC",
- "<{ transactionName: ",
- "StringC",
- "; start: ",
- "Type",
- "; end: ",
- "Type",
- "; transactionType: ",
+ "<{ documentType: ",
+ "UnionC",
+ "<[",
+ "LiteralC",
+ "<",
+ "ApmDocumentType",
+ ".ServiceTransactionMetric>, ",
+ "LiteralC",
+ "<",
+ "ApmDocumentType",
+ ".TransactionMetric>, ",
+ "LiteralC",
+ "<",
+ "ApmDocumentType",
+ ".TransactionEvent>]>; rollupInterval: ",
+ "UnionC",
+ "<[",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".OneMinute>, ",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".TenMinutes>, ",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".SixtyMinutes>, ",
+ "LiteralC",
+ "<",
+ "RollupInterval",
+ ".None>]>; }>, ",
+ "TypeC",
+ "<{ kuery: ",
"StringC",
"; }>]>; }> | undefined; handler: ({}: ",
"APMRouteHandlerResources",
- " & { params: { path: { serviceName: string; }; query: { kuery: string; } & { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
+ " & { params: { path: { serviceName: string; }; query: { start: number; end: number; } & { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
"Branded",
"; } & { transactionName: string; start: number; end: number; transactionType: string; }; }; }) => Promise<",
+ ">; } & { documentType: ",
+ "ApmDocumentType",
+ ".TransactionMetric | ",
+ "ApmDocumentType",
+ ".ServiceTransactionMetric | ",
+ "ApmDocumentType",
+ ".TransactionEvent; rollupInterval: ",
+ "RollupInterval",
+ "; } & { kuery: string; }; }; }) => Promise<{ flamegraph: ",
{
"pluginId": "@kbn/profiling-utils",
"scope": "common",
@@ -653,7 +731,7 @@
"section": "def-common.BaseFlameGraph",
"text": "BaseFlameGraph"
},
- " | undefined>; } & ",
+ "; hostNames: string[]; } | undefined>; } & ",
"APMRouteCreateOptions",
"; \"GET /internal/apm/services/{serviceName}/profiling/functions\": { endpoint: \"GET /internal/apm/services/{serviceName}/profiling/functions\"; params?: ",
"TypeC",
@@ -665,12 +743,6 @@
"IntersectionC",
"<[",
"TypeC",
- "<{ start: ",
- "Type",
- "; end: ",
- "Type",
- "; }>, ",
- "TypeC",
"<{ environment: ",
"UnionC",
"<[",
@@ -690,52 +762,28 @@
"text": "NonEmptyStringBrand"
},
">]>; }>, ",
+ "PartialC",
+ "<{ transactionName: ",
+ "StringC",
+ "; }>, ",
"TypeC",
- "<{ documentType: ",
- "UnionC",
- "<[",
- "LiteralC",
- "<",
- "ApmDocumentType",
- ".ServiceTransactionMetric>, ",
- "LiteralC",
- "<",
- "ApmDocumentType",
- ".TransactionMetric>, ",
- "LiteralC",
- "<",
- "ApmDocumentType",
- ".TransactionEvent>]>; rollupInterval: ",
- "UnionC",
- "<[",
- "LiteralC",
- "<",
- "RollupInterval",
- ".OneMinute>, ",
- "LiteralC",
- "<",
- "RollupInterval",
- ".TenMinutes>, ",
- "LiteralC",
- "<",
- "RollupInterval",
- ".SixtyMinutes>, ",
- "LiteralC",
- "<",
- "RollupInterval",
- ".None>]>; }>, ",
- "TypeC",
- "<{ startIndex: ",
+ "<{ start: ",
+ "Type",
+ "; end: ",
+ "Type",
+ "; startIndex: ",
"Type",
"; endIndex: ",
"Type",
- "; }>, ",
+ "; transactionType: ",
+ "StringC",
+ "; }>, ",
"TypeC",
"<{ kuery: ",
"StringC",
"; }>]>; }> | undefined; handler: ({}: ",
"APMRouteHandlerResources",
- " & { params: { path: { serviceName: string; }; query: { start: number; end: number; } & { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
+ " & { params: { path: { serviceName: string; }; query: { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
"Branded",
"; } & { documentType: ",
- "ApmDocumentType",
- ".TransactionMetric | ",
- "ApmDocumentType",
- ".ServiceTransactionMetric | ",
- "ApmDocumentType",
- ".TransactionEvent; rollupInterval: ",
- "RollupInterval",
- "; } & { startIndex: number; endIndex: number; } & { kuery: string; }; }; }) => Promise<{ functions: ",
+ ">; } & { transactionName?: string | undefined; } & { start: number; end: number; startIndex: number; endIndex: number; transactionType: string; } & { kuery: string; }; }; }) => Promise<",
{
"pluginId": "@kbn/profiling-utils",
"scope": "common",
@@ -761,7 +801,7 @@
"section": "def-common.TopNFunctions",
"text": "TopNFunctions"
},
- "; hostNames: string[]; } | undefined>; } & ",
+ " | undefined>; } & ",
"APMRouteCreateOptions",
"; \"GET /internal/apm/profiling/status\": { endpoint: \"GET /internal/apm/profiling/status\"; params?: undefined; handler: ({}: ",
"APMRouteHandlerResources",
@@ -777,11 +817,9 @@
"IntersectionC",
"<[",
"TypeC",
- "<{ start: ",
- "Type",
- "; end: ",
- "Type",
- "; }>, ",
+ "<{ kuery: ",
+ "StringC",
+ "; }>, ",
"TypeC",
"<{ environment: ",
"UnionC",
@@ -802,46 +840,20 @@
"text": "NonEmptyStringBrand"
},
">]>; }>, ",
+ "PartialC",
+ "<{ transactionName: ",
+ "StringC",
+ "; }>, ",
"TypeC",
- "<{ documentType: ",
- "UnionC",
- "<[",
- "LiteralC",
- "<",
- "ApmDocumentType",
- ".ServiceTransactionMetric>, ",
- "LiteralC",
- "<",
- "ApmDocumentType",
- ".TransactionMetric>, ",
- "LiteralC",
- "<",
- "ApmDocumentType",
- ".TransactionEvent>]>; rollupInterval: ",
- "UnionC",
- "<[",
- "LiteralC",
- "<",
- "RollupInterval",
- ".OneMinute>, ",
- "LiteralC",
- "<",
- "RollupInterval",
- ".TenMinutes>, ",
- "LiteralC",
- "<",
- "RollupInterval",
- ".SixtyMinutes>, ",
- "LiteralC",
- "<",
- "RollupInterval",
- ".None>]>; }>, ",
- "TypeC",
- "<{ kuery: ",
+ "<{ start: ",
+ "Type",
+ "; end: ",
+ "Type",
+ "; transactionType: ",
"StringC",
"; }>]>; }> | undefined; handler: ({}: ",
"APMRouteHandlerResources",
- " & { params: { path: { serviceName: string; }; query: { start: number; end: number; } & { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
+ " & { params: { path: { serviceName: string; }; query: { kuery: string; } & { environment: \"ENVIRONMENT_NOT_DEFINED\" | \"ENVIRONMENT_ALL\" | ",
"Branded",
"; } & { documentType: ",
- "ApmDocumentType",
- ".TransactionMetric | ",
- "ApmDocumentType",
- ".ServiceTransactionMetric | ",
- "ApmDocumentType",
- ".TransactionEvent; rollupInterval: ",
- "RollupInterval",
- "; } & { kuery: string; }; }; }) => Promise<{ flamegraph: ",
+ ">; } & { transactionName?: string | undefined; } & { start: number; end: number; transactionType: string; }; }; }) => Promise<",
{
"pluginId": "@kbn/profiling-utils",
"scope": "common",
@@ -867,7 +871,7 @@
"section": "def-common.BaseFlameGraph",
"text": "BaseFlameGraph"
},
- "; hostNames: string[]; } | undefined>; } & ",
+ " | undefined>; } & ",
"APMRouteCreateOptions",
"; \"GET /internal/apm/assistant/get_downstream_dependencies\": { endpoint: \"GET /internal/apm/assistant/get_downstream_dependencies\"; params?: ",
"TypeC",
diff --git a/api_docs/apm.mdx b/api_docs/apm.mdx
index 499fda091f6a..bbbdbc4e9acc 100644
--- a/api_docs/apm.mdx
+++ b/api_docs/apm.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/apm
title: "apm"
image: https://source.unsplash.com/400x175/?github
description: API docs for the apm plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'apm']
---
import apmObj from './apm.devdocs.json';
diff --git a/api_docs/apm_data_access.mdx b/api_docs/apm_data_access.mdx
index 1c8274e6ba15..c928e496bfb1 100644
--- a/api_docs/apm_data_access.mdx
+++ b/api_docs/apm_data_access.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/apmDataAccess
title: "apmDataAccess"
image: https://source.unsplash.com/400x175/?github
description: API docs for the apmDataAccess plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'apmDataAccess']
---
import apmDataAccessObj from './apm_data_access.devdocs.json';
diff --git a/api_docs/asset_manager.mdx b/api_docs/asset_manager.mdx
index 010077cb7d93..108d290939c2 100644
--- a/api_docs/asset_manager.mdx
+++ b/api_docs/asset_manager.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/assetManager
title: "assetManager"
image: https://source.unsplash.com/400x175/?github
description: API docs for the assetManager plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'assetManager']
---
import assetManagerObj from './asset_manager.devdocs.json';
diff --git a/api_docs/banners.mdx b/api_docs/banners.mdx
index c5e957b26ee6..ad897f930dee 100644
--- a/api_docs/banners.mdx
+++ b/api_docs/banners.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/banners
title: "banners"
image: https://source.unsplash.com/400x175/?github
description: API docs for the banners plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'banners']
---
import bannersObj from './banners.devdocs.json';
diff --git a/api_docs/bfetch.mdx b/api_docs/bfetch.mdx
index 2688588e9c01..2316e98d09c1 100644
--- a/api_docs/bfetch.mdx
+++ b/api_docs/bfetch.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/bfetch
title: "bfetch"
image: https://source.unsplash.com/400x175/?github
description: API docs for the bfetch plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'bfetch']
---
import bfetchObj from './bfetch.devdocs.json';
diff --git a/api_docs/canvas.mdx b/api_docs/canvas.mdx
index 1363a05a9480..1838ee58f61f 100644
--- a/api_docs/canvas.mdx
+++ b/api_docs/canvas.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/canvas
title: "canvas"
image: https://source.unsplash.com/400x175/?github
description: API docs for the canvas plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'canvas']
---
import canvasObj from './canvas.devdocs.json';
diff --git a/api_docs/cases.mdx b/api_docs/cases.mdx
index 102a94ec712f..5fde56fa05cb 100644
--- a/api_docs/cases.mdx
+++ b/api_docs/cases.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/cases
title: "cases"
image: https://source.unsplash.com/400x175/?github
description: API docs for the cases plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'cases']
---
import casesObj from './cases.devdocs.json';
diff --git a/api_docs/charts.mdx b/api_docs/charts.mdx
index 55bc7ac7e120..4897df4c4b86 100644
--- a/api_docs/charts.mdx
+++ b/api_docs/charts.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/charts
title: "charts"
image: https://source.unsplash.com/400x175/?github
description: API docs for the charts plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'charts']
---
import chartsObj from './charts.devdocs.json';
diff --git a/api_docs/cloud.mdx b/api_docs/cloud.mdx
index 099637146ef8..df5af9031d59 100644
--- a/api_docs/cloud.mdx
+++ b/api_docs/cloud.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/cloud
title: "cloud"
image: https://source.unsplash.com/400x175/?github
description: API docs for the cloud plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'cloud']
---
import cloudObj from './cloud.devdocs.json';
diff --git a/api_docs/cloud_data_migration.mdx b/api_docs/cloud_data_migration.mdx
index 47fffb64d6e4..bebab0cbb824 100644
--- a/api_docs/cloud_data_migration.mdx
+++ b/api_docs/cloud_data_migration.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/cloudDataMigration
title: "cloudDataMigration"
image: https://source.unsplash.com/400x175/?github
description: API docs for the cloudDataMigration plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'cloudDataMigration']
---
import cloudDataMigrationObj from './cloud_data_migration.devdocs.json';
diff --git a/api_docs/cloud_defend.mdx b/api_docs/cloud_defend.mdx
index b69dc9bb26af..a34e1859c27b 100644
--- a/api_docs/cloud_defend.mdx
+++ b/api_docs/cloud_defend.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/cloudDefend
title: "cloudDefend"
image: https://source.unsplash.com/400x175/?github
description: API docs for the cloudDefend plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'cloudDefend']
---
import cloudDefendObj from './cloud_defend.devdocs.json';
diff --git a/api_docs/cloud_experiments.mdx b/api_docs/cloud_experiments.mdx
index adc0510f9eca..9328c6c2d7bb 100644
--- a/api_docs/cloud_experiments.mdx
+++ b/api_docs/cloud_experiments.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/cloudExperiments
title: "cloudExperiments"
image: https://source.unsplash.com/400x175/?github
description: API docs for the cloudExperiments plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'cloudExperiments']
---
import cloudExperimentsObj from './cloud_experiments.devdocs.json';
diff --git a/api_docs/cloud_security_posture.mdx b/api_docs/cloud_security_posture.mdx
index a2a4ffc570e9..f8b512c0bd92 100644
--- a/api_docs/cloud_security_posture.mdx
+++ b/api_docs/cloud_security_posture.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/cloudSecurityPosture
title: "cloudSecurityPosture"
image: https://source.unsplash.com/400x175/?github
description: API docs for the cloudSecurityPosture plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'cloudSecurityPosture']
---
import cloudSecurityPostureObj from './cloud_security_posture.devdocs.json';
diff --git a/api_docs/console.mdx b/api_docs/console.mdx
index fea8fd9c32e2..d8883fb02ede 100644
--- a/api_docs/console.mdx
+++ b/api_docs/console.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/console
title: "console"
image: https://source.unsplash.com/400x175/?github
description: API docs for the console plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'console']
---
import consoleObj from './console.devdocs.json';
diff --git a/api_docs/content_management.mdx b/api_docs/content_management.mdx
index 381516bb5c97..0f4d73bfaadf 100644
--- a/api_docs/content_management.mdx
+++ b/api_docs/content_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/contentManagement
title: "contentManagement"
image: https://source.unsplash.com/400x175/?github
description: API docs for the contentManagement plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'contentManagement']
---
import contentManagementObj from './content_management.devdocs.json';
diff --git a/api_docs/controls.devdocs.json b/api_docs/controls.devdocs.json
index e83761396014..38d1a78dcab8 100644
--- a/api_docs/controls.devdocs.json
+++ b/api_docs/controls.devdocs.json
@@ -181,7 +181,7 @@
"label": "dispatch",
"description": [],
"signature": [
- "{ setLastSavedInput: (payload: ",
+ "{ setControlWithInvalidSelectionsId: (payload: string | undefined) => void; setLastSavedInput: (payload: ",
{
"pluginId": "controls",
"scope": "common",
@@ -189,7 +189,11 @@
"section": "def-common.PersistableControlGroupInput",
"text": "PersistableControlGroupInput"
},
- ") => void; setControlWithInvalidSelectionsId: (payload: string | undefined) => void; setControlStyle: (payload: ",
+ " | undefined) => void; setLastSavedFilters: (payload: ",
+ "ControlGroupFilterOutput",
+ " | undefined) => void; setUnpublishedFilters: (payload: ",
+ "ControlGroupFilterOutput",
+ " | undefined) => void; setControlStyle: (payload: ",
"ControlStyle",
") => void; setChainingSystem: (payload: ",
"ControlGroupChainingSystem",
@@ -540,6 +544,52 @@
],
"returnComment": []
},
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.ControlGroupContainer.setSavedState",
+ "type": "Function",
+ "tags": [],
+ "label": "setSavedState",
+ "description": [],
+ "signature": [
+ "(lastSavedInput: ",
+ {
+ "pluginId": "controls",
+ "scope": "common",
+ "docId": "kibControlsPluginApi",
+ "section": "def-common.PersistableControlGroupInput",
+ "text": "PersistableControlGroupInput"
+ },
+ ") => void"
+ ],
+ "path": "src/plugins/controls/public/control_group/embeddable/control_group_container.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.ControlGroupContainer.setSavedState.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "lastSavedInput",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "controls",
+ "scope": "common",
+ "docId": "kibControlsPluginApi",
+ "section": "def-common.PersistableControlGroupInput",
+ "text": "PersistableControlGroupInput"
+ }
+ ],
+ "path": "src/plugins/controls/public/control_group/embeddable/control_group_container.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
{
"parentPluginId": "controls",
"id": "def-public.ControlGroupContainer.resetToLastSavedState",
@@ -588,7 +638,7 @@
"section": "def-common.ControlGroupInput",
"text": "ControlGroupInput"
},
- ">, \"id\" | \"controlStyle\" | \"ignoreParentSettings\" | \"panels\" | \"chainingSystem\">"
+ ">, \"id\" | \"controlStyle\" | \"ignoreParentSettings\" | \"panels\" | \"chainingSystem\" | \"showApplySelections\">"
],
"path": "src/plugins/controls/public/control_group/embeddable/control_group_container.tsx",
"deprecated": false,
@@ -1164,6 +1214,40 @@
],
"returnComment": []
},
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.ControlGroupContainer.publishFilters",
+ "type": "Function",
+ "tags": [],
+ "label": "publishFilters",
+ "description": [],
+ "signature": [
+ "({ filters, timeslice }: ",
+ "ControlGroupFilterOutput",
+ ") => void"
+ ],
+ "path": "src/plugins/controls/public/control_group/embeddable/control_group_container.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.ControlGroupContainer.publishFilters.$1",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "{ filters, timeslice }",
+ "description": [],
+ "signature": [
+ "ControlGroupFilterOutput"
+ ],
+ "path": "src/plugins/controls/public/control_group/embeddable/control_group_container.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
{
"parentPluginId": "controls",
"id": "def-public.ControlGroupContainer.createNewPanelState",
@@ -2026,7 +2110,10 @@
"text": "ControlOutput"
},
", any> implements ",
- "IClearableControl"
+ "IClearableControl",
+ "<",
+ "ControlInput",
+ ">"
],
"path": "src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx",
"deprecated": false,
@@ -2344,6 +2431,56 @@
],
"returnComment": []
},
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.OptionsListEmbeddable.selectionsToFilters",
+ "type": "Function",
+ "tags": [],
+ "label": "selectionsToFilters",
+ "description": [],
+ "signature": [
+ "(input: Partial<",
+ {
+ "pluginId": "controls",
+ "scope": "common",
+ "docId": "kibControlsPluginApi",
+ "section": "def-common.OptionsListEmbeddableInput",
+ "text": "OptionsListEmbeddableInput"
+ },
+ ">) => Promise<",
+ "ControlFilterOutput",
+ ">"
+ ],
+ "path": "src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.OptionsListEmbeddable.selectionsToFilters.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "input",
+ "description": [],
+ "signature": [
+ "Partial<",
+ {
+ "pluginId": "controls",
+ "scope": "common",
+ "docId": "kibControlsPluginApi",
+ "section": "def-common.OptionsListEmbeddableInput",
+ "text": "OptionsListEmbeddableInput"
+ },
+ ">"
+ ],
+ "path": "src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
{
"parentPluginId": "controls",
"id": "def-public.OptionsListEmbeddable.clearSelections",
@@ -3158,7 +3295,10 @@
"text": "ControlOutput"
},
", any> implements ",
- "IClearableControl"
+ "IClearableControl",
+ "<",
+ "ControlInput",
+ ">"
],
"path": "src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx",
"deprecated": false,
@@ -3474,6 +3614,56 @@
],
"returnComment": []
},
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.RangeSliderEmbeddable.selectionsToFilters",
+ "type": "Function",
+ "tags": [],
+ "label": "selectionsToFilters",
+ "description": [],
+ "signature": [
+ "(input: Partial<",
+ {
+ "pluginId": "controls",
+ "scope": "common",
+ "docId": "kibControlsPluginApi",
+ "section": "def-common.RangeSliderEmbeddableInput",
+ "text": "RangeSliderEmbeddableInput"
+ },
+ ">) => Promise<",
+ "ControlFilterOutput",
+ ">"
+ ],
+ "path": "src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.RangeSliderEmbeddable.selectionsToFilters.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "input",
+ "description": [],
+ "signature": [
+ "Partial<",
+ {
+ "pluginId": "controls",
+ "scope": "common",
+ "docId": "kibControlsPluginApi",
+ "section": "def-common.RangeSliderEmbeddableInput",
+ "text": "RangeSliderEmbeddableInput"
+ },
+ ">"
+ ],
+ "path": "src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
{
"parentPluginId": "controls",
"id": "def-public.RangeSliderEmbeddable.clearSelections",
@@ -4383,69 +4573,6 @@
],
"initialIsOpen": false
},
- {
- "parentPluginId": "controls",
- "id": "def-public.CommonControlOutput",
- "type": "Interface",
- "tags": [],
- "label": "CommonControlOutput",
- "description": [],
- "path": "src/plugins/controls/public/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [
- {
- "parentPluginId": "controls",
- "id": "def-public.CommonControlOutput.filters",
- "type": "Array",
- "tags": [],
- "label": "filters",
- "description": [],
- "signature": [
- {
- "pluginId": "@kbn/es-query",
- "scope": "common",
- "docId": "kibKbnEsQueryPluginApi",
- "section": "def-common.Filter",
- "text": "Filter"
- },
- "[] | undefined"
- ],
- "path": "src/plugins/controls/public/types.ts",
- "deprecated": false,
- "trackAdoption": false
- },
- {
- "parentPluginId": "controls",
- "id": "def-public.CommonControlOutput.dataViewId",
- "type": "string",
- "tags": [],
- "label": "dataViewId",
- "description": [],
- "signature": [
- "string | undefined"
- ],
- "path": "src/plugins/controls/public/types.ts",
- "deprecated": false,
- "trackAdoption": false
- },
- {
- "parentPluginId": "controls",
- "id": "def-public.CommonControlOutput.timeslice",
- "type": "Object",
- "tags": [],
- "label": "timeslice",
- "description": [],
- "signature": [
- "[number, number] | undefined"
- ],
- "path": "src/plugins/controls/public/types.ts",
- "deprecated": false,
- "trackAdoption": false
- }
- ],
- "initialIsOpen": false
- },
{
"parentPluginId": "controls",
"id": "def-public.ControlEditorProps",
@@ -4671,6 +4798,20 @@
"path": "src/plugins/controls/common/control_group/types.ts",
"deprecated": false,
"trackAdoption": false
+ },
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.ControlGroupInput.showApplySelections",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "showApplySelections",
+ "description": [],
+ "signature": [
+ "boolean | undefined"
+ ],
+ "path": "src/plugins/controls/common/control_group/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
}
],
"initialIsOpen": false
@@ -5610,6 +5751,24 @@
"trackAdoption": false,
"initialIsOpen": false
},
+ {
+ "parentPluginId": "controls",
+ "id": "def-public.CommonControlOutput",
+ "type": "Type",
+ "tags": [],
+ "label": "CommonControlOutput",
+ "description": [],
+ "signature": [
+ "ControlFilterOutput",
+ " & ",
+ "ControlTimesliceOutput",
+ " & { dataViewId?: string | undefined; }"
+ ],
+ "path": "src/plugins/controls/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "controls",
"id": "def-public.CONTROL_GROUP_TYPE",
@@ -5640,7 +5799,9 @@
"section": "def-public.IEmbeddable",
"text": "IEmbeddable"
},
- " & { isChained?: (() => boolean) | undefined; renderPrepend?: (() => React.ReactNode) | undefined; }"
+ " & { isChained?: (() => boolean) | undefined; renderPrepend?: (() => React.ReactNode) | undefined; selectionsToFilters?: ((input: Partial) => Promise<",
+ "ControlGroupFilterOutput",
+ ">) | undefined; }"
],
"path": "src/plugins/controls/public/types.ts",
"deprecated": false,
@@ -5812,15 +5973,11 @@
"section": "def-public.ContainerOutput",
"text": "ContainerOutput"
},
- " & Omit<",
- {
- "pluginId": "controls",
- "scope": "public",
- "docId": "kibControlsPluginApi",
- "section": "def-public.CommonControlOutput",
- "text": "CommonControlOutput"
- },
- ", \"dataViewId\"> & { dataViewIds: string[]; }"
+ " & ",
+ "ControlFilterOutput",
+ " & ",
+ "ControlTimesliceOutput",
+ " & { dataViewIds: string[]; }"
],
"path": "src/plugins/controls/public/control_group/types.ts",
"deprecated": false,
@@ -5866,7 +6023,9 @@
"section": "def-common.TimeRange",
"text": "TimeRange"
},
- " | undefined; timeslice?: [number, number] | undefined; controlStyle?: ",
+ " | undefined; timeslice?: ",
+ "TimeSlice",
+ " | undefined; controlStyle?: ",
"ControlStyle",
" | undefined; ignoreParentSettings?: ",
"ParentIgnoreSettings",
@@ -5893,13 +6052,10 @@
"text": "EmbeddableOutput"
},
" & ",
- {
- "pluginId": "controls",
- "scope": "public",
- "docId": "kibControlsPluginApi",
- "section": "def-public.CommonControlOutput",
- "text": "CommonControlOutput"
- }
+ "ControlFilterOutput",
+ " & ",
+ "ControlTimesliceOutput",
+ " & { dataViewId?: string | undefined; }"
],
"path": "src/plugins/controls/public/types.ts",
"deprecated": false,
@@ -5975,7 +6131,9 @@
"section": "def-common.TimeRange",
"text": "TimeRange"
},
- " | undefined; timeslice?: [number, number] | undefined; controlStyle?: ",
+ " | undefined; timeslice?: ",
+ "TimeSlice",
+ " | undefined; controlStyle?: ",
"ControlStyle",
" | undefined; ignoreParentSettings?: ",
"ParentIgnoreSettings",
@@ -6466,7 +6624,7 @@
"ParentIgnoreSettings",
" | undefined; chainingSystem: ",
"ControlGroupChainingSystem",
- "; } | undefined"
+ "; showApplySelections?: boolean | undefined; } | undefined"
],
"path": "src/plugins/controls/common/control_group/control_group_persistence.ts",
"deprecated": false,
@@ -6571,7 +6729,7 @@
"section": "def-common.PersistableControlGroupInput",
"text": "PersistableControlGroupInput"
},
- " | undefined) => boolean"
+ " | undefined, compareSelections?: boolean) => boolean"
],
"path": "src/plugins/controls/common/control_group/control_group_persistence.ts",
"deprecated": false,
@@ -6620,6 +6778,21 @@
"deprecated": false,
"trackAdoption": false,
"isRequired": false
+ },
+ {
+ "parentPluginId": "controls",
+ "id": "def-common.persistableControlGroupInputIsEqual.$3",
+ "type": "boolean",
+ "tags": [],
+ "label": "compareSelections",
+ "description": [],
+ "signature": [
+ "boolean"
+ ],
+ "path": "src/plugins/controls/common/control_group/control_group_persistence.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
}
],
"returnComment": [],
@@ -6905,6 +7078,20 @@
"path": "src/plugins/controls/common/control_group/types.ts",
"deprecated": false,
"trackAdoption": false
+ },
+ {
+ "parentPluginId": "controls",
+ "id": "def-common.ControlGroupInput.showApplySelections",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "showApplySelections",
+ "description": [],
+ "signature": [
+ "boolean | undefined"
+ ],
+ "path": "src/plugins/controls/common/control_group/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
}
],
"initialIsOpen": false
@@ -7438,7 +7625,9 @@
"section": "def-common.TimeRange",
"text": "TimeRange"
},
- " | undefined; timeslice?: [number, number] | undefined; controlStyle?: ",
+ " | undefined; timeslice?: ",
+ "TimeSlice",
+ " | undefined; controlStyle?: ",
"ControlStyle",
" | undefined; ignoreParentSettings?: ",
"ParentIgnoreSettings",
@@ -7544,7 +7733,7 @@
},
"; chainingSystem: ",
"ControlGroupChainingSystem",
- "; }"
+ "; showApplySelections?: boolean | undefined; }"
],
"path": "src/plugins/controls/common/control_group/types.ts",
"deprecated": false,
@@ -7561,7 +7750,7 @@
"\nOnly parts of the Control Group Input should be persisted"
],
"signature": [
- "(\"controlStyle\" | \"ignoreParentSettings\" | \"panels\" | \"chainingSystem\")[]"
+ "(\"controlStyle\" | \"ignoreParentSettings\" | \"panels\" | \"chainingSystem\" | \"showApplySelections\")[]"
],
"path": "src/plugins/controls/common/control_group/types.ts",
"deprecated": false,
diff --git a/api_docs/controls.mdx b/api_docs/controls.mdx
index afab8c6b6b6e..9ea5ef9031e7 100644
--- a/api_docs/controls.mdx
+++ b/api_docs/controls.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/controls
title: "controls"
image: https://source.unsplash.com/400x175/?github
description: API docs for the controls plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'controls']
---
import controlsObj from './controls.devdocs.json';
@@ -21,7 +21,7 @@ Contact [@elastic/kibana-presentation](https://github.com/orgs/elastic/teams/kib
| Public API count | Any count | Items lacking comments | Missing exports |
|-------------------|-----------|------------------------|-----------------|
-| 332 | 0 | 324 | 16 |
+| 340 | 0 | 332 | 20 |
## Client
diff --git a/api_docs/custom_integrations.mdx b/api_docs/custom_integrations.mdx
index 4d7d25e37dc0..fff7e25ccb8a 100644
--- a/api_docs/custom_integrations.mdx
+++ b/api_docs/custom_integrations.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/customIntegrations
title: "customIntegrations"
image: https://source.unsplash.com/400x175/?github
description: API docs for the customIntegrations plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'customIntegrations']
---
import customIntegrationsObj from './custom_integrations.devdocs.json';
diff --git a/api_docs/dashboard.devdocs.json b/api_docs/dashboard.devdocs.json
index 361449f99a88..01fcb69b8a2f 100644
--- a/api_docs/dashboard.devdocs.json
+++ b/api_docs/dashboard.devdocs.json
@@ -608,7 +608,13 @@
"label": "AwaitingDashboardAPI",
"description": [],
"signature": [
- "DashboardContainer",
+ {
+ "pluginId": "dashboard",
+ "scope": "public",
+ "docId": "kibDashboardPluginApi",
+ "section": "def-public.DashboardAPI",
+ "text": "DashboardAPI"
+ },
" | null"
],
"path": "src/plugins/dashboard/public/dashboard_container/external_api/dashboard_api.ts",
@@ -669,7 +675,40 @@
"label": "DashboardAPI",
"description": [],
"signature": [
- "DashboardContainer"
+ "DashboardContainer",
+ " & Partial<",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.HasType",
+ "text": "HasType"
+ },
+ "<\"dashboard\"> & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesLocalUnifiedSearch",
+ "text": "PublishesLocalUnifiedSearch"
+ },
+ " & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesPanelTitle",
+ "text": "PublishesPanelTitle"
+ },
+ " & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesSavedObjectId",
+ "text": "PublishesSavedObjectId"
+ },
+ ">"
],
"path": "src/plugins/dashboard/public/dashboard_container/external_api/dashboard_api.ts",
"deprecated": false,
@@ -1973,25 +2012,17 @@
"label": "DashboardAttributes",
"description": [],
"signature": [
- "{ controlGroupInput?: ",
- {
- "pluginId": "controls",
- "scope": "common",
- "docId": "kibControlsPluginApi",
- "section": "def-common.RawControlGroupAttributes",
- "text": "RawControlGroupAttributes"
- },
- " | undefined; refreshInterval?: ",
+ "Omit<",
{
- "pluginId": "data",
+ "pluginId": "dashboard",
"scope": "common",
- "docId": "kibDataQueryPluginApi",
- "section": "def-common.RefreshInterval",
- "text": "RefreshInterval"
+ "docId": "kibDashboardPluginApi",
+ "section": "def-common.DashboardAttributes",
+ "text": "DashboardAttributes"
},
- " | undefined; timeRestore: boolean; optionsJSON?: string | undefined; useMargins?: boolean | undefined; description: string; panelsJSON: string; timeFrom?: string | undefined; version: number; timeTo?: string | undefined; title: string; kibanaSavedObjectMeta: { searchSourceJSON: string; }; }"
+ ", \"controlGroupInput\"> & { controlGroupInput?: ControlGroupAttributesV2 | undefined; }"
],
- "path": "src/plugins/dashboard/common/content_management/v1/types.ts",
+ "path": "src/plugins/dashboard/common/content_management/v2/types.ts",
"deprecated": false,
"trackAdoption": false,
"initialIsOpen": false
diff --git a/api_docs/dashboard.mdx b/api_docs/dashboard.mdx
index 1ada88c7e3c8..89a8df053ba5 100644
--- a/api_docs/dashboard.mdx
+++ b/api_docs/dashboard.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dashboard
title: "dashboard"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dashboard plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dashboard']
---
import dashboardObj from './dashboard.devdocs.json';
diff --git a/api_docs/dashboard_enhanced.mdx b/api_docs/dashboard_enhanced.mdx
index 81d2b0f15555..90e9e836c318 100644
--- a/api_docs/dashboard_enhanced.mdx
+++ b/api_docs/dashboard_enhanced.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dashboardEnhanced
title: "dashboardEnhanced"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dashboardEnhanced plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dashboardEnhanced']
---
import dashboardEnhancedObj from './dashboard_enhanced.devdocs.json';
diff --git a/api_docs/data.mdx b/api_docs/data.mdx
index 0d86872147bb..c82de1c55c3b 100644
--- a/api_docs/data.mdx
+++ b/api_docs/data.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/data
title: "data"
image: https://source.unsplash.com/400x175/?github
description: API docs for the data plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'data']
---
import dataObj from './data.devdocs.json';
diff --git a/api_docs/data_query.mdx b/api_docs/data_query.mdx
index 3ca1cf631448..6bdaaeb8eb5e 100644
--- a/api_docs/data_query.mdx
+++ b/api_docs/data_query.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/data-query
title: "data.query"
image: https://source.unsplash.com/400x175/?github
description: API docs for the data.query plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'data.query']
---
import dataQueryObj from './data_query.devdocs.json';
diff --git a/api_docs/data_search.mdx b/api_docs/data_search.mdx
index 879cc6a80711..5089c2756715 100644
--- a/api_docs/data_search.mdx
+++ b/api_docs/data_search.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/data-search
title: "data.search"
image: https://source.unsplash.com/400x175/?github
description: API docs for the data.search plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'data.search']
---
import dataSearchObj from './data_search.devdocs.json';
diff --git a/api_docs/data_view_editor.mdx b/api_docs/data_view_editor.mdx
index 57935a218882..a3efde9e9fa9 100644
--- a/api_docs/data_view_editor.mdx
+++ b/api_docs/data_view_editor.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dataViewEditor
title: "dataViewEditor"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dataViewEditor plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dataViewEditor']
---
import dataViewEditorObj from './data_view_editor.devdocs.json';
diff --git a/api_docs/data_view_field_editor.mdx b/api_docs/data_view_field_editor.mdx
index 310cac82f896..30190b9d9821 100644
--- a/api_docs/data_view_field_editor.mdx
+++ b/api_docs/data_view_field_editor.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dataViewFieldEditor
title: "dataViewFieldEditor"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dataViewFieldEditor plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dataViewFieldEditor']
---
import dataViewFieldEditorObj from './data_view_field_editor.devdocs.json';
diff --git a/api_docs/data_view_management.mdx b/api_docs/data_view_management.mdx
index 2a26619383ae..854a23bfc616 100644
--- a/api_docs/data_view_management.mdx
+++ b/api_docs/data_view_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dataViewManagement
title: "dataViewManagement"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dataViewManagement plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dataViewManagement']
---
import dataViewManagementObj from './data_view_management.devdocs.json';
diff --git a/api_docs/data_views.mdx b/api_docs/data_views.mdx
index f1edddf7d18f..af3c446808ff 100644
--- a/api_docs/data_views.mdx
+++ b/api_docs/data_views.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dataViews
title: "dataViews"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dataViews plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dataViews']
---
import dataViewsObj from './data_views.devdocs.json';
diff --git a/api_docs/data_visualizer.mdx b/api_docs/data_visualizer.mdx
index 51a460c8d7f4..1bb3230a9578 100644
--- a/api_docs/data_visualizer.mdx
+++ b/api_docs/data_visualizer.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/dataVisualizer
title: "dataVisualizer"
image: https://source.unsplash.com/400x175/?github
description: API docs for the dataVisualizer plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'dataVisualizer']
---
import dataVisualizerObj from './data_visualizer.devdocs.json';
diff --git a/api_docs/dataset_quality.mdx b/api_docs/dataset_quality.mdx
index 68d450f2a08e..17cdc19d4ecc 100644
--- a/api_docs/dataset_quality.mdx
+++ b/api_docs/dataset_quality.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/datasetQuality
title: "datasetQuality"
image: https://source.unsplash.com/400x175/?github
description: API docs for the datasetQuality plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'datasetQuality']
---
import datasetQualityObj from './dataset_quality.devdocs.json';
diff --git a/api_docs/deprecations_by_api.mdx b/api_docs/deprecations_by_api.mdx
index 9ab9bca5a744..98201fc8bb86 100644
--- a/api_docs/deprecations_by_api.mdx
+++ b/api_docs/deprecations_by_api.mdx
@@ -7,7 +7,7 @@ id: kibDevDocsDeprecationsByApi
slug: /kibana-dev-docs/api-meta/deprecated-api-list-by-api
title: Deprecated API usage by API
description: A list of deprecated APIs, which plugins are still referencing them, and when they need to be removed by.
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana']
---
@@ -22,7 +22,7 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | actions, ml, savedObjectsTagging, enterpriseSearch | - |
| | @kbn/core-saved-objects-browser-internal, @kbn/core, savedObjects, visualizations, aiops, ml, dataVisualizer, dashboardEnhanced, graph, lens, securitySolution, eventAnnotation, @kbn/core-saved-objects-browser-mocks | - |
| | @kbn/core, savedObjects, embeddable, visualizations, canvas, graph, ml, @kbn/core-saved-objects-common, @kbn/core-saved-objects-server, actions, alerting, savedSearch, enterpriseSearch, securitySolution, taskManager, @kbn/core-saved-objects-server-internal, @kbn/core-saved-objects-api-server | - |
-| | @kbn/core-saved-objects-base-server-internal, @kbn/core-saved-objects-migration-server-internal, @kbn/core-saved-objects-server-internal, @kbn/core-ui-settings-server-internal, @kbn/core-usage-data-server-internal, taskManager, spaces, actions, @kbn/core-saved-objects-migration-server-mocks, share, dataViews, data, alerting, lens, cases, apmDataAccess, visualizations, ml, observability, savedSearch, canvas, fleet, cloudSecurityPosture, logsShared, graph, lists, maps, infra, securitySolution, apm, synthetics, uptime, dashboard, eventAnnotation, links, savedObjectsManagement, @kbn/core-test-helpers-so-type-serializer, @kbn/core-saved-objects-api-server-internal | - |
+| | @kbn/core-saved-objects-base-server-internal, @kbn/core-saved-objects-migration-server-internal, @kbn/core-saved-objects-server-internal, @kbn/core-ui-settings-server-internal, @kbn/core-usage-data-server-internal, spaces, taskManager, actions, @kbn/core-saved-objects-migration-server-mocks, share, dataViews, data, alerting, lens, cases, apmDataAccess, visualizations, ml, observability, savedSearch, canvas, fleet, cloudSecurityPosture, logsShared, graph, lists, maps, infra, securitySolution, apm, synthetics, uptime, dashboard, eventAnnotation, links, savedObjectsManagement, @kbn/core-test-helpers-so-type-serializer, @kbn/core-saved-objects-api-server-internal | - |
| | stackAlerts, alerting, securitySolution, inputControlVis | - |
| | graph, stackAlerts, inputControlVis, securitySolution, savedObjects | - |
| | dashboard, dataVisualizer, stackAlerts, expressionPartitionVis | - |
diff --git a/api_docs/deprecations_by_plugin.mdx b/api_docs/deprecations_by_plugin.mdx
index 18dca14dfec9..aca5e7b79a5b 100644
--- a/api_docs/deprecations_by_plugin.mdx
+++ b/api_docs/deprecations_by_plugin.mdx
@@ -7,7 +7,7 @@ id: kibDevDocsDeprecationsByPlugin
slug: /kibana-dev-docs/api-meta/deprecated-api-list-by-plugin
title: Deprecated API usage by plugin
description: A list of deprecated APIs, which plugins are still referencing them, and when they need to be removed by.
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana']
---
diff --git a/api_docs/deprecations_by_team.mdx b/api_docs/deprecations_by_team.mdx
index 0dbd06eb4ae3..6cf70680d5a2 100644
--- a/api_docs/deprecations_by_team.mdx
+++ b/api_docs/deprecations_by_team.mdx
@@ -7,7 +7,7 @@ id: kibDevDocsDeprecationsDueByTeam
slug: /kibana-dev-docs/api-meta/deprecations-due-by-team
title: Deprecated APIs due to be removed, by team
description: Lists the teams that are referencing deprecated APIs with a remove by date.
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana']
---
diff --git a/api_docs/dev_tools.mdx b/api_docs/dev_tools.mdx
index 141022bd25c4..1ab80efc44c3 100644
--- a/api_docs/dev_tools.mdx
+++ b/api_docs/dev_tools.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/devTools
title: "devTools"
image: https://source.unsplash.com/400x175/?github
description: API docs for the devTools plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'devTools']
---
import devToolsObj from './dev_tools.devdocs.json';
diff --git a/api_docs/discover.mdx b/api_docs/discover.mdx
index ffc7d66bdf6f..3c175e610a0b 100644
--- a/api_docs/discover.mdx
+++ b/api_docs/discover.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/discover
title: "discover"
image: https://source.unsplash.com/400x175/?github
description: API docs for the discover plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'discover']
---
import discoverObj from './discover.devdocs.json';
diff --git a/api_docs/discover_enhanced.mdx b/api_docs/discover_enhanced.mdx
index 953172099ec9..0558e4c25c42 100644
--- a/api_docs/discover_enhanced.mdx
+++ b/api_docs/discover_enhanced.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/discoverEnhanced
title: "discoverEnhanced"
image: https://source.unsplash.com/400x175/?github
description: API docs for the discoverEnhanced plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'discoverEnhanced']
---
import discoverEnhancedObj from './discover_enhanced.devdocs.json';
diff --git a/api_docs/ecs_data_quality_dashboard.mdx b/api_docs/ecs_data_quality_dashboard.mdx
index 6a3d5c586698..a53a9ec8e094 100644
--- a/api_docs/ecs_data_quality_dashboard.mdx
+++ b/api_docs/ecs_data_quality_dashboard.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/ecsDataQualityDashboard
title: "ecsDataQualityDashboard"
image: https://source.unsplash.com/400x175/?github
description: API docs for the ecsDataQualityDashboard plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'ecsDataQualityDashboard']
---
import ecsDataQualityDashboardObj from './ecs_data_quality_dashboard.devdocs.json';
diff --git a/api_docs/elastic_assistant.mdx b/api_docs/elastic_assistant.mdx
index c8e19dea0f9d..6ebda24a1163 100644
--- a/api_docs/elastic_assistant.mdx
+++ b/api_docs/elastic_assistant.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/elasticAssistant
title: "elasticAssistant"
image: https://source.unsplash.com/400x175/?github
description: API docs for the elasticAssistant plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'elasticAssistant']
---
import elasticAssistantObj from './elastic_assistant.devdocs.json';
diff --git a/api_docs/embeddable.devdocs.json b/api_docs/embeddable.devdocs.json
index e6fe7d3157f4..fbdfaa6630d6 100644
--- a/api_docs/embeddable.devdocs.json
+++ b/api_docs/embeddable.devdocs.json
@@ -7712,7 +7712,7 @@
"tags": [],
"label": "EmbeddablePanel",
"description": [
- "\nLoads and renders a legacy embeddable."
+ "\nLoads and renders a legacy embeddable.\n\nAncestry chain must use 'key' attribute to reset DOM and state when embeddable changes\nFor example "
],
"signature": [
"(props: ",
diff --git a/api_docs/embeddable.mdx b/api_docs/embeddable.mdx
index 9cdf7f30d9bf..eec7ccc7d540 100644
--- a/api_docs/embeddable.mdx
+++ b/api_docs/embeddable.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/embeddable
title: "embeddable"
image: https://source.unsplash.com/400x175/?github
description: API docs for the embeddable plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'embeddable']
---
import embeddableObj from './embeddable.devdocs.json';
diff --git a/api_docs/embeddable_enhanced.mdx b/api_docs/embeddable_enhanced.mdx
index 57d3a89ec52c..3b480b36f866 100644
--- a/api_docs/embeddable_enhanced.mdx
+++ b/api_docs/embeddable_enhanced.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/embeddableEnhanced
title: "embeddableEnhanced"
image: https://source.unsplash.com/400x175/?github
description: API docs for the embeddableEnhanced plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'embeddableEnhanced']
---
import embeddableEnhancedObj from './embeddable_enhanced.devdocs.json';
diff --git a/api_docs/encrypted_saved_objects.mdx b/api_docs/encrypted_saved_objects.mdx
index fe37cdb4407b..92c1a7a7c726 100644
--- a/api_docs/encrypted_saved_objects.mdx
+++ b/api_docs/encrypted_saved_objects.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/encryptedSavedObjects
title: "encryptedSavedObjects"
image: https://source.unsplash.com/400x175/?github
description: API docs for the encryptedSavedObjects plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'encryptedSavedObjects']
---
import encryptedSavedObjectsObj from './encrypted_saved_objects.devdocs.json';
diff --git a/api_docs/enterprise_search.mdx b/api_docs/enterprise_search.mdx
index caff4e864c17..254e40562dbc 100644
--- a/api_docs/enterprise_search.mdx
+++ b/api_docs/enterprise_search.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/enterpriseSearch
title: "enterpriseSearch"
image: https://source.unsplash.com/400x175/?github
description: API docs for the enterpriseSearch plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'enterpriseSearch']
---
import enterpriseSearchObj from './enterprise_search.devdocs.json';
diff --git a/api_docs/es_ui_shared.mdx b/api_docs/es_ui_shared.mdx
index 8e0b761798a0..bf16ab93025b 100644
--- a/api_docs/es_ui_shared.mdx
+++ b/api_docs/es_ui_shared.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/esUiShared
title: "esUiShared"
image: https://source.unsplash.com/400x175/?github
description: API docs for the esUiShared plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'esUiShared']
---
import esUiSharedObj from './es_ui_shared.devdocs.json';
diff --git a/api_docs/event_annotation.mdx b/api_docs/event_annotation.mdx
index 76cbfa9a93fa..1c89cdaaf457 100644
--- a/api_docs/event_annotation.mdx
+++ b/api_docs/event_annotation.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/eventAnnotation
title: "eventAnnotation"
image: https://source.unsplash.com/400x175/?github
description: API docs for the eventAnnotation plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'eventAnnotation']
---
import eventAnnotationObj from './event_annotation.devdocs.json';
diff --git a/api_docs/event_annotation_listing.mdx b/api_docs/event_annotation_listing.mdx
index feaefca6a12f..03ebb1fb5f6f 100644
--- a/api_docs/event_annotation_listing.mdx
+++ b/api_docs/event_annotation_listing.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/eventAnnotationListing
title: "eventAnnotationListing"
image: https://source.unsplash.com/400x175/?github
description: API docs for the eventAnnotationListing plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'eventAnnotationListing']
---
import eventAnnotationListingObj from './event_annotation_listing.devdocs.json';
diff --git a/api_docs/event_log.mdx b/api_docs/event_log.mdx
index cb9ad6b6dfac..154df8c7444c 100644
--- a/api_docs/event_log.mdx
+++ b/api_docs/event_log.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/eventLog
title: "eventLog"
image: https://source.unsplash.com/400x175/?github
description: API docs for the eventLog plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'eventLog']
---
import eventLogObj from './event_log.devdocs.json';
diff --git a/api_docs/exploratory_view.devdocs.json b/api_docs/exploratory_view.devdocs.json
index 7d1c278b1382..fecfc6b9a577 100644
--- a/api_docs/exploratory_view.devdocs.json
+++ b/api_docs/exploratory_view.devdocs.json
@@ -1341,8 +1341,8 @@
"pluginId": "observabilityAIAssistant",
"scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-public.ObservabilityAIAssistantPluginStart",
- "text": "ObservabilityAIAssistantPluginStart"
+ "section": "def-public.ObservabilityAIAssistantPublicStart",
+ "text": "ObservabilityAIAssistantPublicStart"
}
],
"path": "x-pack/plugins/observability_solution/exploratory_view/public/plugin.ts",
diff --git a/api_docs/exploratory_view.mdx b/api_docs/exploratory_view.mdx
index cefb133b56db..cb033c81358d 100644
--- a/api_docs/exploratory_view.mdx
+++ b/api_docs/exploratory_view.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/exploratoryView
title: "exploratoryView"
image: https://source.unsplash.com/400x175/?github
description: API docs for the exploratoryView plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'exploratoryView']
---
import exploratoryViewObj from './exploratory_view.devdocs.json';
diff --git a/api_docs/expression_error.mdx b/api_docs/expression_error.mdx
index a9972f46c975..4c113283337e 100644
--- a/api_docs/expression_error.mdx
+++ b/api_docs/expression_error.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionError
title: "expressionError"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionError plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionError']
---
import expressionErrorObj from './expression_error.devdocs.json';
diff --git a/api_docs/expression_gauge.mdx b/api_docs/expression_gauge.mdx
index 576eeb9401cf..bc366191b378 100644
--- a/api_docs/expression_gauge.mdx
+++ b/api_docs/expression_gauge.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionGauge
title: "expressionGauge"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionGauge plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionGauge']
---
import expressionGaugeObj from './expression_gauge.devdocs.json';
diff --git a/api_docs/expression_heatmap.mdx b/api_docs/expression_heatmap.mdx
index 7352f4c26735..f6a224328aa2 100644
--- a/api_docs/expression_heatmap.mdx
+++ b/api_docs/expression_heatmap.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionHeatmap
title: "expressionHeatmap"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionHeatmap plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionHeatmap']
---
import expressionHeatmapObj from './expression_heatmap.devdocs.json';
diff --git a/api_docs/expression_image.mdx b/api_docs/expression_image.mdx
index 7ce1ee9e708c..59786f0398fe 100644
--- a/api_docs/expression_image.mdx
+++ b/api_docs/expression_image.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionImage
title: "expressionImage"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionImage plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionImage']
---
import expressionImageObj from './expression_image.devdocs.json';
diff --git a/api_docs/expression_legacy_metric_vis.mdx b/api_docs/expression_legacy_metric_vis.mdx
index a003ced7bacc..37f51d20b02d 100644
--- a/api_docs/expression_legacy_metric_vis.mdx
+++ b/api_docs/expression_legacy_metric_vis.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionLegacyMetricVis
title: "expressionLegacyMetricVis"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionLegacyMetricVis plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionLegacyMetricVis']
---
import expressionLegacyMetricVisObj from './expression_legacy_metric_vis.devdocs.json';
diff --git a/api_docs/expression_metric.mdx b/api_docs/expression_metric.mdx
index 236871d90577..302717dcda55 100644
--- a/api_docs/expression_metric.mdx
+++ b/api_docs/expression_metric.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionMetric
title: "expressionMetric"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionMetric plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionMetric']
---
import expressionMetricObj from './expression_metric.devdocs.json';
diff --git a/api_docs/expression_metric_vis.mdx b/api_docs/expression_metric_vis.mdx
index 4da1f10a01bc..7cbc9b44c76f 100644
--- a/api_docs/expression_metric_vis.mdx
+++ b/api_docs/expression_metric_vis.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionMetricVis
title: "expressionMetricVis"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionMetricVis plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionMetricVis']
---
import expressionMetricVisObj from './expression_metric_vis.devdocs.json';
diff --git a/api_docs/expression_partition_vis.mdx b/api_docs/expression_partition_vis.mdx
index 3219a0f0aa48..c308921a6537 100644
--- a/api_docs/expression_partition_vis.mdx
+++ b/api_docs/expression_partition_vis.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionPartitionVis
title: "expressionPartitionVis"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionPartitionVis plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionPartitionVis']
---
import expressionPartitionVisObj from './expression_partition_vis.devdocs.json';
diff --git a/api_docs/expression_repeat_image.mdx b/api_docs/expression_repeat_image.mdx
index c39cb69f0555..551528feb539 100644
--- a/api_docs/expression_repeat_image.mdx
+++ b/api_docs/expression_repeat_image.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionRepeatImage
title: "expressionRepeatImage"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionRepeatImage plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionRepeatImage']
---
import expressionRepeatImageObj from './expression_repeat_image.devdocs.json';
diff --git a/api_docs/expression_reveal_image.mdx b/api_docs/expression_reveal_image.mdx
index f8bd2a4a94fe..ce9d42d3ffd1 100644
--- a/api_docs/expression_reveal_image.mdx
+++ b/api_docs/expression_reveal_image.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionRevealImage
title: "expressionRevealImage"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionRevealImage plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionRevealImage']
---
import expressionRevealImageObj from './expression_reveal_image.devdocs.json';
diff --git a/api_docs/expression_shape.mdx b/api_docs/expression_shape.mdx
index 87c45b4b4b6b..2255d15a6f6b 100644
--- a/api_docs/expression_shape.mdx
+++ b/api_docs/expression_shape.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionShape
title: "expressionShape"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionShape plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionShape']
---
import expressionShapeObj from './expression_shape.devdocs.json';
diff --git a/api_docs/expression_tagcloud.mdx b/api_docs/expression_tagcloud.mdx
index 6dfc9907c412..1d0c401f701f 100644
--- a/api_docs/expression_tagcloud.mdx
+++ b/api_docs/expression_tagcloud.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionTagcloud
title: "expressionTagcloud"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionTagcloud plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionTagcloud']
---
import expressionTagcloudObj from './expression_tagcloud.devdocs.json';
diff --git a/api_docs/expression_x_y.mdx b/api_docs/expression_x_y.mdx
index 54e7e03d88e8..0e2ae04e8659 100644
--- a/api_docs/expression_x_y.mdx
+++ b/api_docs/expression_x_y.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressionXY
title: "expressionXY"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressionXY plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressionXY']
---
import expressionXYObj from './expression_x_y.devdocs.json';
diff --git a/api_docs/expressions.mdx b/api_docs/expressions.mdx
index 1a846cf5043d..2bd30352b756 100644
--- a/api_docs/expressions.mdx
+++ b/api_docs/expressions.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/expressions
title: "expressions"
image: https://source.unsplash.com/400x175/?github
description: API docs for the expressions plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'expressions']
---
import expressionsObj from './expressions.devdocs.json';
diff --git a/api_docs/features.mdx b/api_docs/features.mdx
index 5e7eda58f65d..6f2818de986b 100644
--- a/api_docs/features.mdx
+++ b/api_docs/features.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/features
title: "features"
image: https://source.unsplash.com/400x175/?github
description: API docs for the features plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'features']
---
import featuresObj from './features.devdocs.json';
diff --git a/api_docs/field_formats.mdx b/api_docs/field_formats.mdx
index 9333e63031f9..148dd545131a 100644
--- a/api_docs/field_formats.mdx
+++ b/api_docs/field_formats.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/fieldFormats
title: "fieldFormats"
image: https://source.unsplash.com/400x175/?github
description: API docs for the fieldFormats plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'fieldFormats']
---
import fieldFormatsObj from './field_formats.devdocs.json';
diff --git a/api_docs/file_upload.mdx b/api_docs/file_upload.mdx
index 0361673614b4..0027790c79d8 100644
--- a/api_docs/file_upload.mdx
+++ b/api_docs/file_upload.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/fileUpload
title: "fileUpload"
image: https://source.unsplash.com/400x175/?github
description: API docs for the fileUpload plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'fileUpload']
---
import fileUploadObj from './file_upload.devdocs.json';
diff --git a/api_docs/files.mdx b/api_docs/files.mdx
index 933033efc084..51d5cb36e5a8 100644
--- a/api_docs/files.mdx
+++ b/api_docs/files.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/files
title: "files"
image: https://source.unsplash.com/400x175/?github
description: API docs for the files plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'files']
---
import filesObj from './files.devdocs.json';
diff --git a/api_docs/files_management.mdx b/api_docs/files_management.mdx
index 1758a967639f..179a12c33037 100644
--- a/api_docs/files_management.mdx
+++ b/api_docs/files_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/filesManagement
title: "filesManagement"
image: https://source.unsplash.com/400x175/?github
description: API docs for the filesManagement plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'filesManagement']
---
import filesManagementObj from './files_management.devdocs.json';
diff --git a/api_docs/fleet.devdocs.json b/api_docs/fleet.devdocs.json
index ac959cede413..04d57b352912 100644
--- a/api_docs/fleet.devdocs.json
+++ b/api_docs/fleet.devdocs.json
@@ -19152,7 +19152,7 @@
"label": "fleet",
"description": [],
"signature": [
- "{ all: boolean; setup: boolean; readEnrollmentTokens: boolean; readAgentPolicies: boolean; }"
+ "{ all: boolean; setup: boolean; readEnrollmentTokens: boolean; readAgentPolicies: boolean; allAgentPolicies: boolean; readAgents: boolean; allAgents: boolean; readSettings: boolean; allSettings: boolean; }"
],
"path": "x-pack/plugins/fleet/common/authz.ts",
"deprecated": false,
diff --git a/api_docs/fleet.mdx b/api_docs/fleet.mdx
index 64c8f30894da..0b9f825dd239 100644
--- a/api_docs/fleet.mdx
+++ b/api_docs/fleet.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/fleet
title: "fleet"
image: https://source.unsplash.com/400x175/?github
description: API docs for the fleet plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'fleet']
---
import fleetObj from './fleet.devdocs.json';
diff --git a/api_docs/global_search.mdx b/api_docs/global_search.mdx
index 62e2bdd24e54..a7b18cb5b34b 100644
--- a/api_docs/global_search.mdx
+++ b/api_docs/global_search.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/globalSearch
title: "globalSearch"
image: https://source.unsplash.com/400x175/?github
description: API docs for the globalSearch plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'globalSearch']
---
import globalSearchObj from './global_search.devdocs.json';
diff --git a/api_docs/guided_onboarding.mdx b/api_docs/guided_onboarding.mdx
index 29d859d93878..11b80c873c65 100644
--- a/api_docs/guided_onboarding.mdx
+++ b/api_docs/guided_onboarding.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/guidedOnboarding
title: "guidedOnboarding"
image: https://source.unsplash.com/400x175/?github
description: API docs for the guidedOnboarding plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'guidedOnboarding']
---
import guidedOnboardingObj from './guided_onboarding.devdocs.json';
diff --git a/api_docs/home.mdx b/api_docs/home.mdx
index d1c327ea7e8a..e077b1ddebb6 100644
--- a/api_docs/home.mdx
+++ b/api_docs/home.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/home
title: "home"
image: https://source.unsplash.com/400x175/?github
description: API docs for the home plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'home']
---
import homeObj from './home.devdocs.json';
diff --git a/api_docs/image_embeddable.mdx b/api_docs/image_embeddable.mdx
index 28e1aa000e12..580ed8e06919 100644
--- a/api_docs/image_embeddable.mdx
+++ b/api_docs/image_embeddable.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/imageEmbeddable
title: "imageEmbeddable"
image: https://source.unsplash.com/400x175/?github
description: API docs for the imageEmbeddable plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'imageEmbeddable']
---
import imageEmbeddableObj from './image_embeddable.devdocs.json';
diff --git a/api_docs/index_lifecycle_management.mdx b/api_docs/index_lifecycle_management.mdx
index 1a5074ccd79d..067e41e33248 100644
--- a/api_docs/index_lifecycle_management.mdx
+++ b/api_docs/index_lifecycle_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/indexLifecycleManagement
title: "indexLifecycleManagement"
image: https://source.unsplash.com/400x175/?github
description: API docs for the indexLifecycleManagement plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'indexLifecycleManagement']
---
import indexLifecycleManagementObj from './index_lifecycle_management.devdocs.json';
diff --git a/api_docs/index_management.devdocs.json b/api_docs/index_management.devdocs.json
index 17257de39362..a1548fef1c1c 100644
--- a/api_docs/index_management.devdocs.json
+++ b/api_docs/index_management.devdocs.json
@@ -1152,20 +1152,6 @@
"deprecated": false,
"trackAdoption": false
},
- {
- "parentPluginId": "indexManagement",
- "id": "def-common.ComponentTemplateDeserialized.isDeprecated",
- "type": "CompoundType",
- "tags": [],
- "label": "isDeprecated",
- "description": [],
- "signature": [
- "boolean | undefined"
- ],
- "path": "x-pack/plugins/index_management/common/types/component_templates.ts",
- "deprecated": false,
- "trackAdoption": false
- },
{
"parentPluginId": "indexManagement",
"id": "def-common.ComponentTemplateDeserialized._kbnMeta",
@@ -2800,13 +2786,10 @@
{
"parentPluginId": "indexManagement",
"id": "def-common.TemplateDeserialized.allowAutoCreate",
- "type": "CompoundType",
+ "type": "string",
"tags": [],
"label": "allowAutoCreate",
"description": [],
- "signature": [
- "boolean | undefined"
- ],
"path": "x-pack/plugins/index_management/common/types/templates.ts",
"deprecated": false,
"trackAdoption": false
diff --git a/api_docs/index_management.mdx b/api_docs/index_management.mdx
index 0d7079807d0e..f6212a5d199a 100644
--- a/api_docs/index_management.mdx
+++ b/api_docs/index_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/indexManagement
title: "indexManagement"
image: https://source.unsplash.com/400x175/?github
description: API docs for the indexManagement plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'indexManagement']
---
import indexManagementObj from './index_management.devdocs.json';
@@ -21,7 +21,7 @@ Contact [@elastic/platform-deployment-management](https://github.com/orgs/elasti
| Public API count | Any count | Items lacking comments | Missing exports |
|-------------------|-----------|------------------------|-----------------|
-| 225 | 0 | 220 | 3 |
+| 224 | 0 | 219 | 3 |
## Client
diff --git a/api_docs/infra.mdx b/api_docs/infra.mdx
index b928c477663a..4680646dc613 100644
--- a/api_docs/infra.mdx
+++ b/api_docs/infra.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/infra
title: "infra"
image: https://source.unsplash.com/400x175/?github
description: API docs for the infra plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'infra']
---
import infraObj from './infra.devdocs.json';
diff --git a/api_docs/ingest_pipelines.mdx b/api_docs/ingest_pipelines.mdx
index af4636c4cb84..ba6d2bdbc689 100644
--- a/api_docs/ingest_pipelines.mdx
+++ b/api_docs/ingest_pipelines.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/ingestPipelines
title: "ingestPipelines"
image: https://source.unsplash.com/400x175/?github
description: API docs for the ingestPipelines plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'ingestPipelines']
---
import ingestPipelinesObj from './ingest_pipelines.devdocs.json';
diff --git a/api_docs/inspector.mdx b/api_docs/inspector.mdx
index e37a03ff4544..c0e989cc6dfa 100644
--- a/api_docs/inspector.mdx
+++ b/api_docs/inspector.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/inspector
title: "inspector"
image: https://source.unsplash.com/400x175/?github
description: API docs for the inspector plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'inspector']
---
import inspectorObj from './inspector.devdocs.json';
diff --git a/api_docs/interactive_setup.mdx b/api_docs/interactive_setup.mdx
index 6e06f0f8bb18..32ffd679906c 100644
--- a/api_docs/interactive_setup.mdx
+++ b/api_docs/interactive_setup.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/interactiveSetup
title: "interactiveSetup"
image: https://source.unsplash.com/400x175/?github
description: API docs for the interactiveSetup plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'interactiveSetup']
---
import interactiveSetupObj from './interactive_setup.devdocs.json';
diff --git a/api_docs/kbn_ace.mdx b/api_docs/kbn_ace.mdx
index caf91e85bf1d..fae1ca7a8ba4 100644
--- a/api_docs/kbn_ace.mdx
+++ b/api_docs/kbn_ace.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ace
title: "@kbn/ace"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ace plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ace']
---
import kbnAceObj from './kbn_ace.devdocs.json';
diff --git a/api_docs/kbn_actions_types.mdx b/api_docs/kbn_actions_types.mdx
index 0edaed5b5086..057b1d4c3138 100644
--- a/api_docs/kbn_actions_types.mdx
+++ b/api_docs/kbn_actions_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-actions-types
title: "@kbn/actions-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/actions-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/actions-types']
---
import kbnActionsTypesObj from './kbn_actions_types.devdocs.json';
diff --git a/api_docs/kbn_aiops_components.mdx b/api_docs/kbn_aiops_components.mdx
index c600645472aa..813b96d1ed28 100644
--- a/api_docs/kbn_aiops_components.mdx
+++ b/api_docs/kbn_aiops_components.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-aiops-components
title: "@kbn/aiops-components"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/aiops-components plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/aiops-components']
---
import kbnAiopsComponentsObj from './kbn_aiops_components.devdocs.json';
diff --git a/api_docs/kbn_aiops_utils.mdx b/api_docs/kbn_aiops_utils.mdx
index a57dda3371fa..d79f8e658e19 100644
--- a/api_docs/kbn_aiops_utils.mdx
+++ b/api_docs/kbn_aiops_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-aiops-utils
title: "@kbn/aiops-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/aiops-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/aiops-utils']
---
import kbnAiopsUtilsObj from './kbn_aiops_utils.devdocs.json';
diff --git a/api_docs/kbn_alerting_api_integration_helpers.mdx b/api_docs/kbn_alerting_api_integration_helpers.mdx
index 24a4b4f2981d..df3db757ea86 100644
--- a/api_docs/kbn_alerting_api_integration_helpers.mdx
+++ b/api_docs/kbn_alerting_api_integration_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-alerting-api-integration-helpers
title: "@kbn/alerting-api-integration-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/alerting-api-integration-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/alerting-api-integration-helpers']
---
import kbnAlertingApiIntegrationHelpersObj from './kbn_alerting_api_integration_helpers.devdocs.json';
diff --git a/api_docs/kbn_alerting_state_types.mdx b/api_docs/kbn_alerting_state_types.mdx
index 6a7c987d0932..f1b6519489fd 100644
--- a/api_docs/kbn_alerting_state_types.mdx
+++ b/api_docs/kbn_alerting_state_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-alerting-state-types
title: "@kbn/alerting-state-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/alerting-state-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/alerting-state-types']
---
import kbnAlertingStateTypesObj from './kbn_alerting_state_types.devdocs.json';
diff --git a/api_docs/kbn_alerting_types.mdx b/api_docs/kbn_alerting_types.mdx
index 163852482993..c741b72f9880 100644
--- a/api_docs/kbn_alerting_types.mdx
+++ b/api_docs/kbn_alerting_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-alerting-types
title: "@kbn/alerting-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/alerting-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/alerting-types']
---
import kbnAlertingTypesObj from './kbn_alerting_types.devdocs.json';
diff --git a/api_docs/kbn_alerts_as_data_utils.devdocs.json b/api_docs/kbn_alerts_as_data_utils.devdocs.json
index 869b2bf876ef..b59b0fab3cdd 100644
--- a/api_docs/kbn_alerts_as_data_utils.devdocs.json
+++ b/api_docs/kbn_alerts_as_data_utils.devdocs.json
@@ -196,7 +196,7 @@
"label": "AADAlert",
"description": [],
"signature": [
- "({ '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & {} & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & { 'agent.name'?: string | undefined; 'error.grouping_key'?: string | undefined; 'error.grouping_name'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; labels?: unknown; 'processor.event'?: string | undefined; 'service.environment'?: string | undefined; 'service.language.name'?: string | undefined; 'service.name'?: string | undefined; 'transaction.name'?: string | undefined; 'transaction.type'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'slo.id'?: string | undefined; 'slo.instanceId'?: string | undefined; 'slo.revision'?: string | number | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'agent.name'?: string | undefined; 'anomaly.bucket_span.minutes'?: string | undefined; 'anomaly.start'?: string | number | undefined; 'error.message'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'monitor.id'?: string | undefined; 'monitor.name'?: string | undefined; 'monitor.type'?: string | undefined; 'observer.geo.name'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.x509.issuer.common_name'?: string | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.subject.common_name'?: string | undefined; 'url.full'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({ '@timestamp': string | number; 'kibana.alert.ancestors': { depth: string | number; id: string; index: string; type: string; }[]; 'kibana.alert.depth': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.original_event.action': string; 'kibana.alert.original_event.category': string[]; 'kibana.alert.original_event.created': string | number; 'kibana.alert.original_event.dataset': string; 'kibana.alert.original_event.id': string; 'kibana.alert.original_event.ingested': string | number; 'kibana.alert.original_event.kind': string; 'kibana.alert.original_event.module': string; 'kibana.alert.original_event.original': string; 'kibana.alert.original_event.outcome': string; 'kibana.alert.original_event.provider': string; 'kibana.alert.original_event.sequence': string | number; 'kibana.alert.original_event.type': string[]; 'kibana.alert.original_time': string | number; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.false_positives': string[]; 'kibana.alert.rule.max_signals': (string | number)[]; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.threat.framework': string; 'kibana.alert.rule.threat.tactic.id': string; 'kibana.alert.rule.threat.tactic.name': string; 'kibana.alert.rule.threat.tactic.reference': string; 'kibana.alert.rule.threat.technique.id': string; 'kibana.alert.rule.threat.technique.name': string; 'kibana.alert.rule.threat.technique.reference': string; 'kibana.alert.rule.threat.technique.subtechnique.id': string; 'kibana.alert.rule.threat.technique.subtechnique.name': string; 'kibana.alert.rule.threat.technique.subtechnique.reference': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'ecs.version'?: string | undefined; 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'host.asset.criticality'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.ancestors.rule'?: string | undefined; 'kibana.alert.building_block_type'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.group.id'?: string | undefined; 'kibana.alert.group.index'?: number | undefined; 'kibana.alert.host.criticality_level'?: string | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.new_terms'?: string[] | undefined; 'kibana.alert.original_event.agent_id_status'?: string | undefined; 'kibana.alert.original_event.code'?: string | undefined; 'kibana.alert.original_event.duration'?: string | undefined; 'kibana.alert.original_event.end'?: string | number | undefined; 'kibana.alert.original_event.hash'?: string | undefined; 'kibana.alert.original_event.reason'?: string | undefined; 'kibana.alert.original_event.reference'?: string | undefined; 'kibana.alert.original_event.risk_score'?: number | undefined; 'kibana.alert.original_event.risk_score_norm'?: number | undefined; 'kibana.alert.original_event.severity'?: string | number | undefined; 'kibana.alert.original_event.start'?: string | number | undefined; 'kibana.alert.original_event.timezone'?: string | undefined; 'kibana.alert.original_event.url'?: string | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.building_block_type'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.immutable'?: string[] | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.rule.timeline_id'?: string[] | undefined; 'kibana.alert.rule.timeline_title'?: string[] | undefined; 'kibana.alert.rule.timestamp_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.threshold_result.cardinality'?: unknown; 'kibana.alert.threshold_result.count'?: string | number | undefined; 'kibana.alert.threshold_result.from'?: string | number | undefined; 'kibana.alert.threshold_result.terms'?: { field?: string | undefined; value?: string | undefined; }[] | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.user.criticality_level'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.alert.workflow_user'?: string | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; 'user.asset.criticality'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({ 'kibana.alert.job_id': string; } & { 'kibana.alert.anomaly_score'?: number[] | undefined; 'kibana.alert.anomaly_timestamp'?: string | number | undefined; 'kibana.alert.is_interim'?: boolean | undefined; 'kibana.alert.top_influencers'?: { influencer_field_name?: string | undefined; influencer_field_value?: string | undefined; influencer_score?: number | undefined; initial_influencer_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; timestamp?: string | number | undefined; }[] | undefined; 'kibana.alert.top_records'?: { actual?: number | undefined; by_field_name?: string | undefined; by_field_value?: string | undefined; detector_index?: number | undefined; field_name?: string | undefined; function?: string | undefined; initial_record_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; over_field_name?: string | undefined; over_field_value?: string | undefined; partition_field_name?: string | undefined; partition_field_value?: string | undefined; record_score?: number | undefined; timestamp?: string | number | undefined; typical?: number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & { 'kibana.alert.datafeed_results'?: { datafeed_id?: string | undefined; datafeed_state?: string | undefined; job_id?: string | undefined; job_state?: string | undefined; }[] | undefined; 'kibana.alert.delayed_data_results'?: { annotation?: string | undefined; end_timestamp?: string | number | undefined; job_id?: string | undefined; missed_docs_count?: string | number | undefined; }[] | undefined; 'kibana.alert.job_errors_results'?: { errors?: unknown; job_id?: string | undefined; }[] | undefined; 'kibana.alert.mml_results'?: { job_id?: string | undefined; log_time?: string | number | undefined; memory_status?: string | undefined; model_bytes?: string | number | undefined; model_bytes_exceeded?: string | number | undefined; model_bytes_memory_limit?: string | number | undefined; peak_model_bytes?: string | number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & { 'kibana.alert.results'?: { description?: string | undefined; health_status?: string | undefined; issues?: unknown; node_name?: string | undefined; transform_id?: string | undefined; transform_state?: string | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; })"
+ "({ '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & {} & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & { 'agent.name'?: string | undefined; 'error.grouping_key'?: string | undefined; 'error.grouping_name'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; labels?: unknown; 'processor.event'?: string | undefined; 'service.environment'?: string | undefined; 'service.language.name'?: string | undefined; 'service.name'?: string | undefined; 'transaction.name'?: string | undefined; 'transaction.type'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'slo.id'?: string | undefined; 'slo.instanceId'?: string | undefined; 'slo.revision'?: string | number | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({} & { 'agent.name'?: string | undefined; 'anomaly.bucket_span.minutes'?: string | undefined; 'anomaly.start'?: string | number | undefined; 'error.message'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'monitor.id'?: string | undefined; 'monitor.name'?: string | undefined; 'monitor.type'?: string | undefined; 'observer.geo.name'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.x509.issuer.common_name'?: string | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.subject.common_name'?: string | undefined; 'url.full'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({ '@timestamp': string | number; 'kibana.alert.ancestors': { depth: string | number; id: string; index: string; type: string; }[]; 'kibana.alert.depth': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.original_event.action': string; 'kibana.alert.original_event.category': string[]; 'kibana.alert.original_event.created': string | number; 'kibana.alert.original_event.dataset': string; 'kibana.alert.original_event.id': string; 'kibana.alert.original_event.ingested': string | number; 'kibana.alert.original_event.kind': string; 'kibana.alert.original_event.module': string; 'kibana.alert.original_event.original': string; 'kibana.alert.original_event.outcome': string; 'kibana.alert.original_event.provider': string; 'kibana.alert.original_event.sequence': string | number; 'kibana.alert.original_event.type': string[]; 'kibana.alert.original_time': string | number; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.false_positives': string[]; 'kibana.alert.rule.max_signals': (string | number)[]; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.threat.framework': string; 'kibana.alert.rule.threat.tactic.id': string; 'kibana.alert.rule.threat.tactic.name': string; 'kibana.alert.rule.threat.tactic.reference': string; 'kibana.alert.rule.threat.technique.id': string; 'kibana.alert.rule.threat.technique.name': string; 'kibana.alert.rule.threat.technique.reference': string; 'kibana.alert.rule.threat.technique.subtechnique.id': string; 'kibana.alert.rule.threat.technique.subtechnique.name': string; 'kibana.alert.rule.threat.technique.subtechnique.reference': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'ecs.version'?: string | undefined; 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'host.asset.criticality'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.ancestors.rule'?: string | undefined; 'kibana.alert.building_block_type'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.group.id'?: string | undefined; 'kibana.alert.group.index'?: number | undefined; 'kibana.alert.host.criticality_level'?: string | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.new_terms'?: string[] | undefined; 'kibana.alert.original_event.agent_id_status'?: string | undefined; 'kibana.alert.original_event.code'?: string | undefined; 'kibana.alert.original_event.duration'?: string | undefined; 'kibana.alert.original_event.end'?: string | number | undefined; 'kibana.alert.original_event.hash'?: string | undefined; 'kibana.alert.original_event.reason'?: string | undefined; 'kibana.alert.original_event.reference'?: string | undefined; 'kibana.alert.original_event.risk_score'?: number | undefined; 'kibana.alert.original_event.risk_score_norm'?: number | undefined; 'kibana.alert.original_event.severity'?: string | number | undefined; 'kibana.alert.original_event.start'?: string | number | undefined; 'kibana.alert.original_event.timezone'?: string | undefined; 'kibana.alert.original_event.url'?: string | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.building_block_type'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.immutable'?: string[] | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.rule.timeline_id'?: string[] | undefined; 'kibana.alert.rule.timeline_title'?: string[] | undefined; 'kibana.alert.rule.timestamp_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.threshold_result.cardinality'?: unknown; 'kibana.alert.threshold_result.count'?: string | number | undefined; 'kibana.alert.threshold_result.from'?: string | number | undefined; 'kibana.alert.threshold_result.terms'?: { field?: string | undefined; value?: string | undefined; }[] | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.user.criticality_level'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.alert.workflow_user'?: string | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; 'user.asset.criticality'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }) | ({ 'kibana.alert.job_id': string; } & { 'kibana.alert.anomaly_score'?: number[] | undefined; 'kibana.alert.anomaly_timestamp'?: string | number | undefined; 'kibana.alert.is_interim'?: boolean | undefined; 'kibana.alert.top_influencers'?: { influencer_field_name?: string | undefined; influencer_field_value?: string | undefined; influencer_score?: number | undefined; initial_influencer_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; timestamp?: string | number | undefined; }[] | undefined; 'kibana.alert.top_records'?: { actual?: number | undefined; by_field_name?: string | undefined; by_field_value?: string | undefined; detector_index?: number | undefined; field_name?: string | undefined; function?: string | undefined; initial_record_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; over_field_name?: string | undefined; over_field_value?: string | undefined; partition_field_name?: string | undefined; partition_field_value?: string | undefined; record_score?: number | undefined; timestamp?: string | number | undefined; typical?: number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & { 'kibana.alert.datafeed_results'?: { datafeed_id?: string | undefined; datafeed_state?: string | undefined; job_id?: string | undefined; job_state?: string | undefined; }[] | undefined; 'kibana.alert.delayed_data_results'?: { annotation?: string | undefined; end_timestamp?: string | number | undefined; job_id?: string | undefined; missed_docs_count?: string | number | undefined; }[] | undefined; 'kibana.alert.job_errors_results'?: { errors?: unknown; job_id?: string | undefined; }[] | undefined; 'kibana.alert.mml_results'?: { job_id?: string | undefined; log_time?: string | number | undefined; memory_status?: string | undefined; model_bytes?: string | number | undefined; model_bytes_exceeded?: string | number | undefined; model_bytes_memory_limit?: string | number | undefined; peak_model_bytes?: string | number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }) | ({} & { 'kibana.alert.results'?: { description?: string | undefined; health_status?: string | undefined; issues?: unknown; node_name?: string | undefined; transform_id?: string | undefined; transform_state?: string | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; })"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/index.ts",
"deprecated": false,
@@ -211,7 +211,7 @@
"label": "Alert",
"description": [],
"signature": [
- "{ '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
+ "{ '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/alert_schema.ts",
"deprecated": false,
@@ -241,7 +241,7 @@
"label": "AlertFieldMap",
"description": [],
"signature": [
- "{ readonly \"kibana.alert.action_group\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.case_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.duration.us\": { readonly type: \"long\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.end\": { readonly type: \"date\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping\": { readonly type: \"boolean\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping_history\": { readonly type: \"boolean\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.maintenance_window_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.instance.id\": { readonly type: \"keyword\"; readonly array: false; readonly required: true; }; readonly \"kibana.alert.last_detected\": { readonly type: \"date\"; readonly required: false; readonly array: false; }; readonly \"kibana.alert.reason\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; readonly multi_fields: ",
+ "{ readonly \"kibana.alert.action_group\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.case_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.duration.us\": { readonly type: \"long\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.end\": { readonly type: \"date\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping\": { readonly type: \"boolean\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping_history\": { readonly type: \"boolean\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.maintenance_window_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.consecutive_matches\": { readonly type: \"long\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.instance.id\": { readonly type: \"keyword\"; readonly array: false; readonly required: true; }; readonly \"kibana.alert.last_detected\": { readonly type: \"date\"; readonly required: false; readonly array: false; }; readonly \"kibana.alert.reason\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; readonly multi_fields: ",
{
"pluginId": "@kbn/alerts-as-data-utils",
"scope": "common",
@@ -264,7 +264,7 @@
"label": "DefaultAlert",
"description": [],
"signature": [
- "{} & {} & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
+ "{} & {} & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/default_schema.ts",
"deprecated": false,
@@ -330,7 +330,7 @@
"label": "MlAnomalyDetectionAlert",
"description": [],
"signature": [
- "{ 'kibana.alert.job_id': string; } & { 'kibana.alert.anomaly_score'?: number[] | undefined; 'kibana.alert.anomaly_timestamp'?: string | number | undefined; 'kibana.alert.is_interim'?: boolean | undefined; 'kibana.alert.top_influencers'?: { influencer_field_name?: string | undefined; influencer_field_value?: string | undefined; influencer_score?: number | undefined; initial_influencer_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; timestamp?: string | number | undefined; }[] | undefined; 'kibana.alert.top_records'?: { actual?: number | undefined; by_field_name?: string | undefined; by_field_value?: string | undefined; detector_index?: number | undefined; field_name?: string | undefined; function?: string | undefined; initial_record_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; over_field_name?: string | undefined; over_field_value?: string | undefined; partition_field_name?: string | undefined; partition_field_value?: string | undefined; record_score?: number | undefined; timestamp?: string | number | undefined; typical?: number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
+ "{ 'kibana.alert.job_id': string; } & { 'kibana.alert.anomaly_score'?: number[] | undefined; 'kibana.alert.anomaly_timestamp'?: string | number | undefined; 'kibana.alert.is_interim'?: boolean | undefined; 'kibana.alert.top_influencers'?: { influencer_field_name?: string | undefined; influencer_field_value?: string | undefined; influencer_score?: number | undefined; initial_influencer_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; timestamp?: string | number | undefined; }[] | undefined; 'kibana.alert.top_records'?: { actual?: number | undefined; by_field_name?: string | undefined; by_field_value?: string | undefined; detector_index?: number | undefined; field_name?: string | undefined; function?: string | undefined; initial_record_score?: number | undefined; is_interim?: boolean | undefined; job_id?: string | undefined; over_field_name?: string | undefined; over_field_value?: string | undefined; partition_field_name?: string | undefined; partition_field_value?: string | undefined; record_score?: number | undefined; timestamp?: string | number | undefined; typical?: number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/ml_anomaly_detection_schema.ts",
"deprecated": false,
@@ -345,7 +345,7 @@
"label": "MlAnomalyDetectionHealthAlert",
"description": [],
"signature": [
- "{} & { 'kibana.alert.datafeed_results'?: { datafeed_id?: string | undefined; datafeed_state?: string | undefined; job_id?: string | undefined; job_state?: string | undefined; }[] | undefined; 'kibana.alert.delayed_data_results'?: { annotation?: string | undefined; end_timestamp?: string | number | undefined; job_id?: string | undefined; missed_docs_count?: string | number | undefined; }[] | undefined; 'kibana.alert.job_errors_results'?: { errors?: unknown; job_id?: string | undefined; }[] | undefined; 'kibana.alert.mml_results'?: { job_id?: string | undefined; log_time?: string | number | undefined; memory_status?: string | undefined; model_bytes?: string | number | undefined; model_bytes_exceeded?: string | number | undefined; model_bytes_memory_limit?: string | number | undefined; peak_model_bytes?: string | number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
+ "{} & { 'kibana.alert.datafeed_results'?: { datafeed_id?: string | undefined; datafeed_state?: string | undefined; job_id?: string | undefined; job_state?: string | undefined; }[] | undefined; 'kibana.alert.delayed_data_results'?: { annotation?: string | undefined; end_timestamp?: string | number | undefined; job_id?: string | undefined; missed_docs_count?: string | number | undefined; }[] | undefined; 'kibana.alert.job_errors_results'?: { errors?: unknown; job_id?: string | undefined; }[] | undefined; 'kibana.alert.mml_results'?: { job_id?: string | undefined; log_time?: string | number | undefined; memory_status?: string | undefined; model_bytes?: string | number | undefined; model_bytes_exceeded?: string | number | undefined; model_bytes_memory_limit?: string | number | undefined; peak_model_bytes?: string | number | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/ml_anomaly_detection_health_schema.ts",
"deprecated": false,
@@ -360,7 +360,7 @@
"label": "ObservabilityApmAlert",
"description": [],
"signature": [
- "{} & { 'agent.name'?: string | undefined; 'error.grouping_key'?: string | undefined; 'error.grouping_name'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; labels?: unknown; 'processor.event'?: string | undefined; 'service.environment'?: string | undefined; 'service.language.name'?: string | undefined; 'service.name'?: string | undefined; 'transaction.name'?: string | undefined; 'transaction.type'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
+ "{} & { 'agent.name'?: string | undefined; 'error.grouping_key'?: string | undefined; 'error.grouping_name'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; labels?: unknown; 'processor.event'?: string | undefined; 'service.environment'?: string | undefined; 'service.language.name'?: string | undefined; 'service.name'?: string | undefined; 'transaction.name'?: string | undefined; 'transaction.type'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/observability_apm_schema.ts",
"deprecated": false,
@@ -375,7 +375,7 @@
"label": "ObservabilityLogsAlert",
"description": [],
"signature": [
- "{} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
+ "{} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/observability_logs_schema.ts",
"deprecated": false,
@@ -390,7 +390,7 @@
"label": "ObservabilityMetricsAlert",
"description": [],
"signature": [
- "{} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
+ "{} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/observability_metrics_schema.ts",
"deprecated": false,
@@ -405,7 +405,7 @@
"label": "ObservabilitySloAlert",
"description": [],
"signature": [
- "{} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'slo.id'?: string | undefined; 'slo.instanceId'?: string | undefined; 'slo.revision'?: string | number | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
+ "{} & { 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'slo.id'?: string | undefined; 'slo.instanceId'?: string | undefined; 'slo.revision'?: string | number | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/observability_slo_schema.ts",
"deprecated": false,
@@ -420,7 +420,7 @@
"label": "ObservabilityUptimeAlert",
"description": [],
"signature": [
- "{} & { 'agent.name'?: string | undefined; 'anomaly.bucket_span.minutes'?: string | undefined; 'anomaly.start'?: string | number | undefined; 'error.message'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'monitor.id'?: string | undefined; 'monitor.name'?: string | undefined; 'monitor.type'?: string | undefined; 'observer.geo.name'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.x509.issuer.common_name'?: string | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.subject.common_name'?: string | undefined; 'url.full'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
+ "{} & { 'agent.name'?: string | undefined; 'anomaly.bucket_span.minutes'?: string | undefined; 'anomaly.start'?: string | number | undefined; 'error.message'?: string | undefined; 'kibana.alert.context'?: unknown; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | number | undefined; 'kibana.alert.evaluation.values'?: (string | number)[] | undefined; 'kibana.alert.group'?: { field?: string[] | undefined; value?: string[] | undefined; }[] | undefined; 'monitor.id'?: string | undefined; 'monitor.name'?: string | undefined; 'monitor.type'?: string | undefined; 'observer.geo.name'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.x509.issuer.common_name'?: string | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.subject.common_name'?: string | undefined; 'url.full'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/observability_uptime_schema.ts",
"deprecated": false,
@@ -435,7 +435,7 @@
"label": "SecurityAlert",
"description": [],
"signature": [
- "{ '@timestamp': string | number; 'kibana.alert.ancestors': { depth: string | number; id: string; index: string; type: string; }[]; 'kibana.alert.depth': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.original_event.action': string; 'kibana.alert.original_event.category': string[]; 'kibana.alert.original_event.created': string | number; 'kibana.alert.original_event.dataset': string; 'kibana.alert.original_event.id': string; 'kibana.alert.original_event.ingested': string | number; 'kibana.alert.original_event.kind': string; 'kibana.alert.original_event.module': string; 'kibana.alert.original_event.original': string; 'kibana.alert.original_event.outcome': string; 'kibana.alert.original_event.provider': string; 'kibana.alert.original_event.sequence': string | number; 'kibana.alert.original_event.type': string[]; 'kibana.alert.original_time': string | number; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.false_positives': string[]; 'kibana.alert.rule.max_signals': (string | number)[]; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.threat.framework': string; 'kibana.alert.rule.threat.tactic.id': string; 'kibana.alert.rule.threat.tactic.name': string; 'kibana.alert.rule.threat.tactic.reference': string; 'kibana.alert.rule.threat.technique.id': string; 'kibana.alert.rule.threat.technique.name': string; 'kibana.alert.rule.threat.technique.reference': string; 'kibana.alert.rule.threat.technique.subtechnique.id': string; 'kibana.alert.rule.threat.technique.subtechnique.name': string; 'kibana.alert.rule.threat.technique.subtechnique.reference': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'ecs.version'?: string | undefined; 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'host.asset.criticality'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.ancestors.rule'?: string | undefined; 'kibana.alert.building_block_type'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.group.id'?: string | undefined; 'kibana.alert.group.index'?: number | undefined; 'kibana.alert.host.criticality_level'?: string | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.new_terms'?: string[] | undefined; 'kibana.alert.original_event.agent_id_status'?: string | undefined; 'kibana.alert.original_event.code'?: string | undefined; 'kibana.alert.original_event.duration'?: string | undefined; 'kibana.alert.original_event.end'?: string | number | undefined; 'kibana.alert.original_event.hash'?: string | undefined; 'kibana.alert.original_event.reason'?: string | undefined; 'kibana.alert.original_event.reference'?: string | undefined; 'kibana.alert.original_event.risk_score'?: number | undefined; 'kibana.alert.original_event.risk_score_norm'?: number | undefined; 'kibana.alert.original_event.severity'?: string | number | undefined; 'kibana.alert.original_event.start'?: string | number | undefined; 'kibana.alert.original_event.timezone'?: string | undefined; 'kibana.alert.original_event.url'?: string | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.building_block_type'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.immutable'?: string[] | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.rule.timeline_id'?: string[] | undefined; 'kibana.alert.rule.timeline_title'?: string[] | undefined; 'kibana.alert.rule.timestamp_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.threshold_result.cardinality'?: unknown; 'kibana.alert.threshold_result.count'?: string | number | undefined; 'kibana.alert.threshold_result.from'?: string | number | undefined; 'kibana.alert.threshold_result.terms'?: { field?: string | undefined; value?: string | undefined; }[] | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.user.criticality_level'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.alert.workflow_user'?: string | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; 'user.asset.criticality'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
+ "{ '@timestamp': string | number; 'kibana.alert.ancestors': { depth: string | number; id: string; index: string; type: string; }[]; 'kibana.alert.depth': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.original_event.action': string; 'kibana.alert.original_event.category': string[]; 'kibana.alert.original_event.created': string | number; 'kibana.alert.original_event.dataset': string; 'kibana.alert.original_event.id': string; 'kibana.alert.original_event.ingested': string | number; 'kibana.alert.original_event.kind': string; 'kibana.alert.original_event.module': string; 'kibana.alert.original_event.original': string; 'kibana.alert.original_event.outcome': string; 'kibana.alert.original_event.provider': string; 'kibana.alert.original_event.sequence': string | number; 'kibana.alert.original_event.type': string[]; 'kibana.alert.original_time': string | number; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.false_positives': string[]; 'kibana.alert.rule.max_signals': (string | number)[]; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.threat.framework': string; 'kibana.alert.rule.threat.tactic.id': string; 'kibana.alert.rule.threat.tactic.name': string; 'kibana.alert.rule.threat.tactic.reference': string; 'kibana.alert.rule.threat.technique.id': string; 'kibana.alert.rule.threat.technique.name': string; 'kibana.alert.rule.threat.technique.reference': string; 'kibana.alert.rule.threat.technique.subtechnique.id': string; 'kibana.alert.rule.threat.technique.subtechnique.name': string; 'kibana.alert.rule.threat.technique.subtechnique.reference': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'ecs.version'?: string | undefined; 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'host.asset.criticality'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.ancestors.rule'?: string | undefined; 'kibana.alert.building_block_type'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.group.id'?: string | undefined; 'kibana.alert.group.index'?: number | undefined; 'kibana.alert.host.criticality_level'?: string | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.new_terms'?: string[] | undefined; 'kibana.alert.original_event.agent_id_status'?: string | undefined; 'kibana.alert.original_event.code'?: string | undefined; 'kibana.alert.original_event.duration'?: string | undefined; 'kibana.alert.original_event.end'?: string | number | undefined; 'kibana.alert.original_event.hash'?: string | undefined; 'kibana.alert.original_event.reason'?: string | undefined; 'kibana.alert.original_event.reference'?: string | undefined; 'kibana.alert.original_event.risk_score'?: number | undefined; 'kibana.alert.original_event.risk_score_norm'?: number | undefined; 'kibana.alert.original_event.severity'?: string | number | undefined; 'kibana.alert.original_event.start'?: string | number | undefined; 'kibana.alert.original_event.timezone'?: string | undefined; 'kibana.alert.original_event.url'?: string | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.building_block_type'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.immutable'?: string[] | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.rule.timeline_id'?: string[] | undefined; 'kibana.alert.rule.timeline_title'?: string[] | undefined; 'kibana.alert.rule.timestamp_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.threshold_result.cardinality'?: unknown; 'kibana.alert.threshold_result.count'?: string | number | undefined; 'kibana.alert.threshold_result.from'?: string | number | undefined; 'kibana.alert.threshold_result.terms'?: { field?: string | undefined; value?: string | undefined; }[] | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.user.criticality_level'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.alert.workflow_user'?: string | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; 'user.asset.criticality'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; } & { '@timestamp': string | number; 'ecs.version': string; } & { 'agent.build.original'?: string | undefined; 'agent.ephemeral_id'?: string | undefined; 'agent.id'?: string | undefined; 'agent.name'?: string | undefined; 'agent.type'?: string | undefined; 'agent.version'?: string | undefined; 'client.address'?: string | undefined; 'client.as.number'?: string | number | undefined; 'client.as.organization.name'?: string | undefined; 'client.bytes'?: string | number | undefined; 'client.domain'?: string | undefined; 'client.geo.city_name'?: string | undefined; 'client.geo.continent_code'?: string | undefined; 'client.geo.continent_name'?: string | undefined; 'client.geo.country_iso_code'?: string | undefined; 'client.geo.country_name'?: string | undefined; 'client.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'client.geo.name'?: string | undefined; 'client.geo.postal_code'?: string | undefined; 'client.geo.region_iso_code'?: string | undefined; 'client.geo.region_name'?: string | undefined; 'client.geo.timezone'?: string | undefined; 'client.ip'?: string | undefined; 'client.mac'?: string | undefined; 'client.nat.ip'?: string | undefined; 'client.nat.port'?: string | number | undefined; 'client.packets'?: string | number | undefined; 'client.port'?: string | number | undefined; 'client.registered_domain'?: string | undefined; 'client.subdomain'?: string | undefined; 'client.top_level_domain'?: string | undefined; 'client.user.domain'?: string | undefined; 'client.user.email'?: string | undefined; 'client.user.full_name'?: string | undefined; 'client.user.group.domain'?: string | undefined; 'client.user.group.id'?: string | undefined; 'client.user.group.name'?: string | undefined; 'client.user.hash'?: string | undefined; 'client.user.id'?: string | undefined; 'client.user.name'?: string | undefined; 'client.user.roles'?: string[] | undefined; 'cloud.account.id'?: string | undefined; 'cloud.account.name'?: string | undefined; 'cloud.availability_zone'?: string | undefined; 'cloud.instance.id'?: string | undefined; 'cloud.instance.name'?: string | undefined; 'cloud.machine.type'?: string | undefined; 'cloud.origin.account.id'?: string | undefined; 'cloud.origin.account.name'?: string | undefined; 'cloud.origin.availability_zone'?: string | undefined; 'cloud.origin.instance.id'?: string | undefined; 'cloud.origin.instance.name'?: string | undefined; 'cloud.origin.machine.type'?: string | undefined; 'cloud.origin.project.id'?: string | undefined; 'cloud.origin.project.name'?: string | undefined; 'cloud.origin.provider'?: string | undefined; 'cloud.origin.region'?: string | undefined; 'cloud.origin.service.name'?: string | undefined; 'cloud.project.id'?: string | undefined; 'cloud.project.name'?: string | undefined; 'cloud.provider'?: string | undefined; 'cloud.region'?: string | undefined; 'cloud.service.name'?: string | undefined; 'cloud.target.account.id'?: string | undefined; 'cloud.target.account.name'?: string | undefined; 'cloud.target.availability_zone'?: string | undefined; 'cloud.target.instance.id'?: string | undefined; 'cloud.target.instance.name'?: string | undefined; 'cloud.target.machine.type'?: string | undefined; 'cloud.target.project.id'?: string | undefined; 'cloud.target.project.name'?: string | undefined; 'cloud.target.provider'?: string | undefined; 'cloud.target.region'?: string | undefined; 'cloud.target.service.name'?: string | undefined; 'container.cpu.usage'?: string | number | undefined; 'container.disk.read.bytes'?: string | number | undefined; 'container.disk.write.bytes'?: string | number | undefined; 'container.id'?: string | undefined; 'container.image.hash.all'?: string[] | undefined; 'container.image.name'?: string | undefined; 'container.image.tag'?: string[] | undefined; 'container.labels'?: unknown; 'container.memory.usage'?: string | number | undefined; 'container.name'?: string | undefined; 'container.network.egress.bytes'?: string | number | undefined; 'container.network.ingress.bytes'?: string | number | undefined; 'container.runtime'?: string | undefined; 'container.security_context.privileged'?: boolean | undefined; 'destination.address'?: string | undefined; 'destination.as.number'?: string | number | undefined; 'destination.as.organization.name'?: string | undefined; 'destination.bytes'?: string | number | undefined; 'destination.domain'?: string | undefined; 'destination.geo.city_name'?: string | undefined; 'destination.geo.continent_code'?: string | undefined; 'destination.geo.continent_name'?: string | undefined; 'destination.geo.country_iso_code'?: string | undefined; 'destination.geo.country_name'?: string | undefined; 'destination.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'destination.geo.name'?: string | undefined; 'destination.geo.postal_code'?: string | undefined; 'destination.geo.region_iso_code'?: string | undefined; 'destination.geo.region_name'?: string | undefined; 'destination.geo.timezone'?: string | undefined; 'destination.ip'?: string | undefined; 'destination.mac'?: string | undefined; 'destination.nat.ip'?: string | undefined; 'destination.nat.port'?: string | number | undefined; 'destination.packets'?: string | number | undefined; 'destination.port'?: string | number | undefined; 'destination.registered_domain'?: string | undefined; 'destination.subdomain'?: string | undefined; 'destination.top_level_domain'?: string | undefined; 'destination.user.domain'?: string | undefined; 'destination.user.email'?: string | undefined; 'destination.user.full_name'?: string | undefined; 'destination.user.group.domain'?: string | undefined; 'destination.user.group.id'?: string | undefined; 'destination.user.group.name'?: string | undefined; 'destination.user.hash'?: string | undefined; 'destination.user.id'?: string | undefined; 'destination.user.name'?: string | undefined; 'destination.user.roles'?: string[] | undefined; 'device.id'?: string | undefined; 'device.manufacturer'?: string | undefined; 'device.model.identifier'?: string | undefined; 'device.model.name'?: string | undefined; 'dll.code_signature.digest_algorithm'?: string | undefined; 'dll.code_signature.exists'?: boolean | undefined; 'dll.code_signature.signing_id'?: string | undefined; 'dll.code_signature.status'?: string | undefined; 'dll.code_signature.subject_name'?: string | undefined; 'dll.code_signature.team_id'?: string | undefined; 'dll.code_signature.timestamp'?: string | number | undefined; 'dll.code_signature.trusted'?: boolean | undefined; 'dll.code_signature.valid'?: boolean | undefined; 'dll.hash.md5'?: string | undefined; 'dll.hash.sha1'?: string | undefined; 'dll.hash.sha256'?: string | undefined; 'dll.hash.sha384'?: string | undefined; 'dll.hash.sha512'?: string | undefined; 'dll.hash.ssdeep'?: string | undefined; 'dll.hash.tlsh'?: string | undefined; 'dll.name'?: string | undefined; 'dll.path'?: string | undefined; 'dll.pe.architecture'?: string | undefined; 'dll.pe.company'?: string | undefined; 'dll.pe.description'?: string | undefined; 'dll.pe.file_version'?: string | undefined; 'dll.pe.go_import_hash'?: string | undefined; 'dll.pe.go_imports'?: unknown; 'dll.pe.go_imports_names_entropy'?: string | number | undefined; 'dll.pe.go_imports_names_var_entropy'?: string | number | undefined; 'dll.pe.go_stripped'?: boolean | undefined; 'dll.pe.imphash'?: string | undefined; 'dll.pe.import_hash'?: string | undefined; 'dll.pe.imports'?: unknown[] | undefined; 'dll.pe.imports_names_entropy'?: string | number | undefined; 'dll.pe.imports_names_var_entropy'?: string | number | undefined; 'dll.pe.original_file_name'?: string | undefined; 'dll.pe.pehash'?: string | undefined; 'dll.pe.product'?: string | undefined; 'dll.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'dns.answers'?: { class?: string | undefined; data?: string | undefined; name?: string | undefined; ttl?: string | number | undefined; type?: string | undefined; }[] | undefined; 'dns.header_flags'?: string[] | undefined; 'dns.id'?: string | undefined; 'dns.op_code'?: string | undefined; 'dns.question.class'?: string | undefined; 'dns.question.name'?: string | undefined; 'dns.question.registered_domain'?: string | undefined; 'dns.question.subdomain'?: string | undefined; 'dns.question.top_level_domain'?: string | undefined; 'dns.question.type'?: string | undefined; 'dns.resolved_ip'?: string[] | undefined; 'dns.response_code'?: string | undefined; 'dns.type'?: string | undefined; 'email.attachments'?: { 'file.extension'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.name'?: string | undefined; 'file.size'?: string | number | undefined; }[] | undefined; 'email.bcc.address'?: string[] | undefined; 'email.cc.address'?: string[] | undefined; 'email.content_type'?: string | undefined; 'email.delivery_timestamp'?: string | number | undefined; 'email.direction'?: string | undefined; 'email.from.address'?: string[] | undefined; 'email.local_id'?: string | undefined; 'email.message_id'?: string | undefined; 'email.origination_timestamp'?: string | number | undefined; 'email.reply_to.address'?: string[] | undefined; 'email.sender.address'?: string | undefined; 'email.subject'?: string | undefined; 'email.to.address'?: string[] | undefined; 'email.x_mailer'?: string | undefined; 'error.code'?: string | undefined; 'error.id'?: string | undefined; 'error.message'?: string | undefined; 'error.stack_trace'?: string | undefined; 'error.type'?: string | undefined; 'event.action'?: string | undefined; 'event.agent_id_status'?: string | undefined; 'event.category'?: string[] | undefined; 'event.code'?: string | undefined; 'event.created'?: string | number | undefined; 'event.dataset'?: string | undefined; 'event.duration'?: string | number | undefined; 'event.end'?: string | number | undefined; 'event.hash'?: string | undefined; 'event.id'?: string | undefined; 'event.ingested'?: string | number | undefined; 'event.kind'?: string | undefined; 'event.module'?: string | undefined; 'event.original'?: string | undefined; 'event.outcome'?: string | undefined; 'event.provider'?: string | undefined; 'event.reason'?: string | undefined; 'event.reference'?: string | undefined; 'event.risk_score'?: number | undefined; 'event.risk_score_norm'?: number | undefined; 'event.sequence'?: string | number | undefined; 'event.severity'?: string | number | undefined; 'event.start'?: string | number | undefined; 'event.timezone'?: string | undefined; 'event.type'?: string[] | undefined; 'event.url'?: string | undefined; 'faas.coldstart'?: boolean | undefined; 'faas.execution'?: string | undefined; 'faas.id'?: string | undefined; 'faas.name'?: string | undefined; 'faas.version'?: string | undefined; 'file.accessed'?: string | number | undefined; 'file.attributes'?: string[] | undefined; 'file.code_signature.digest_algorithm'?: string | undefined; 'file.code_signature.exists'?: boolean | undefined; 'file.code_signature.signing_id'?: string | undefined; 'file.code_signature.status'?: string | undefined; 'file.code_signature.subject_name'?: string | undefined; 'file.code_signature.team_id'?: string | undefined; 'file.code_signature.timestamp'?: string | number | undefined; 'file.code_signature.trusted'?: boolean | undefined; 'file.code_signature.valid'?: boolean | undefined; 'file.created'?: string | number | undefined; 'file.ctime'?: string | number | undefined; 'file.device'?: string | undefined; 'file.directory'?: string | undefined; 'file.drive_letter'?: string | undefined; 'file.elf.architecture'?: string | undefined; 'file.elf.byte_order'?: string | undefined; 'file.elf.cpu_type'?: string | undefined; 'file.elf.creation_date'?: string | number | undefined; 'file.elf.exports'?: unknown[] | undefined; 'file.elf.go_import_hash'?: string | undefined; 'file.elf.go_imports'?: unknown; 'file.elf.go_imports_names_entropy'?: string | number | undefined; 'file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'file.elf.go_stripped'?: boolean | undefined; 'file.elf.header.abi_version'?: string | undefined; 'file.elf.header.class'?: string | undefined; 'file.elf.header.data'?: string | undefined; 'file.elf.header.entrypoint'?: string | number | undefined; 'file.elf.header.object_version'?: string | undefined; 'file.elf.header.os_abi'?: string | undefined; 'file.elf.header.type'?: string | undefined; 'file.elf.header.version'?: string | undefined; 'file.elf.import_hash'?: string | undefined; 'file.elf.imports'?: unknown[] | undefined; 'file.elf.imports_names_entropy'?: string | number | undefined; 'file.elf.imports_names_var_entropy'?: string | number | undefined; 'file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'file.elf.shared_libraries'?: string[] | undefined; 'file.elf.telfhash'?: string | undefined; 'file.extension'?: string | undefined; 'file.fork_name'?: string | undefined; 'file.gid'?: string | undefined; 'file.group'?: string | undefined; 'file.hash.md5'?: string | undefined; 'file.hash.sha1'?: string | undefined; 'file.hash.sha256'?: string | undefined; 'file.hash.sha384'?: string | undefined; 'file.hash.sha512'?: string | undefined; 'file.hash.ssdeep'?: string | undefined; 'file.hash.tlsh'?: string | undefined; 'file.inode'?: string | undefined; 'file.macho.go_import_hash'?: string | undefined; 'file.macho.go_imports'?: unknown; 'file.macho.go_imports_names_entropy'?: string | number | undefined; 'file.macho.go_imports_names_var_entropy'?: string | number | undefined; 'file.macho.go_stripped'?: boolean | undefined; 'file.macho.import_hash'?: string | undefined; 'file.macho.imports'?: unknown[] | undefined; 'file.macho.imports_names_entropy'?: string | number | undefined; 'file.macho.imports_names_var_entropy'?: string | number | undefined; 'file.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.macho.symhash'?: string | undefined; 'file.mime_type'?: string | undefined; 'file.mode'?: string | undefined; 'file.mtime'?: string | number | undefined; 'file.name'?: string | undefined; 'file.owner'?: string | undefined; 'file.path'?: string | undefined; 'file.pe.architecture'?: string | undefined; 'file.pe.company'?: string | undefined; 'file.pe.description'?: string | undefined; 'file.pe.file_version'?: string | undefined; 'file.pe.go_import_hash'?: string | undefined; 'file.pe.go_imports'?: unknown; 'file.pe.go_imports_names_entropy'?: string | number | undefined; 'file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'file.pe.go_stripped'?: boolean | undefined; 'file.pe.imphash'?: string | undefined; 'file.pe.import_hash'?: string | undefined; 'file.pe.imports'?: unknown[] | undefined; 'file.pe.imports_names_entropy'?: string | number | undefined; 'file.pe.imports_names_var_entropy'?: string | number | undefined; 'file.pe.original_file_name'?: string | undefined; 'file.pe.pehash'?: string | undefined; 'file.pe.product'?: string | undefined; 'file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'file.size'?: string | number | undefined; 'file.target_path'?: string | undefined; 'file.type'?: string | undefined; 'file.uid'?: string | undefined; 'file.x509.alternative_names'?: string[] | undefined; 'file.x509.issuer.common_name'?: string[] | undefined; 'file.x509.issuer.country'?: string[] | undefined; 'file.x509.issuer.distinguished_name'?: string | undefined; 'file.x509.issuer.locality'?: string[] | undefined; 'file.x509.issuer.organization'?: string[] | undefined; 'file.x509.issuer.organizational_unit'?: string[] | undefined; 'file.x509.issuer.state_or_province'?: string[] | undefined; 'file.x509.not_after'?: string | number | undefined; 'file.x509.not_before'?: string | number | undefined; 'file.x509.public_key_algorithm'?: string | undefined; 'file.x509.public_key_curve'?: string | undefined; 'file.x509.public_key_exponent'?: string | number | undefined; 'file.x509.public_key_size'?: string | number | undefined; 'file.x509.serial_number'?: string | undefined; 'file.x509.signature_algorithm'?: string | undefined; 'file.x509.subject.common_name'?: string[] | undefined; 'file.x509.subject.country'?: string[] | undefined; 'file.x509.subject.distinguished_name'?: string | undefined; 'file.x509.subject.locality'?: string[] | undefined; 'file.x509.subject.organization'?: string[] | undefined; 'file.x509.subject.organizational_unit'?: string[] | undefined; 'file.x509.subject.state_or_province'?: string[] | undefined; 'file.x509.version_number'?: string | undefined; 'group.domain'?: string | undefined; 'group.id'?: string | undefined; 'group.name'?: string | undefined; 'host.architecture'?: string | undefined; 'host.boot.id'?: string | undefined; 'host.cpu.usage'?: string | number | undefined; 'host.disk.read.bytes'?: string | number | undefined; 'host.disk.write.bytes'?: string | number | undefined; 'host.domain'?: string | undefined; 'host.geo.city_name'?: string | undefined; 'host.geo.continent_code'?: string | undefined; 'host.geo.continent_name'?: string | undefined; 'host.geo.country_iso_code'?: string | undefined; 'host.geo.country_name'?: string | undefined; 'host.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'host.geo.name'?: string | undefined; 'host.geo.postal_code'?: string | undefined; 'host.geo.region_iso_code'?: string | undefined; 'host.geo.region_name'?: string | undefined; 'host.geo.timezone'?: string | undefined; 'host.hostname'?: string | undefined; 'host.id'?: string | undefined; 'host.ip'?: string[] | undefined; 'host.mac'?: string[] | undefined; 'host.name'?: string | undefined; 'host.network.egress.bytes'?: string | number | undefined; 'host.network.egress.packets'?: string | number | undefined; 'host.network.ingress.bytes'?: string | number | undefined; 'host.network.ingress.packets'?: string | number | undefined; 'host.os.family'?: string | undefined; 'host.os.full'?: string | undefined; 'host.os.kernel'?: string | undefined; 'host.os.name'?: string | undefined; 'host.os.platform'?: string | undefined; 'host.os.type'?: string | undefined; 'host.os.version'?: string | undefined; 'host.pid_ns_ino'?: string | undefined; 'host.risk.calculated_level'?: string | undefined; 'host.risk.calculated_score'?: number | undefined; 'host.risk.calculated_score_norm'?: number | undefined; 'host.risk.static_level'?: string | undefined; 'host.risk.static_score'?: number | undefined; 'host.risk.static_score_norm'?: number | undefined; 'host.type'?: string | undefined; 'host.uptime'?: string | number | undefined; 'http.request.body.bytes'?: string | number | undefined; 'http.request.body.content'?: string | undefined; 'http.request.bytes'?: string | number | undefined; 'http.request.id'?: string | undefined; 'http.request.method'?: string | undefined; 'http.request.mime_type'?: string | undefined; 'http.request.referrer'?: string | undefined; 'http.response.body.bytes'?: string | number | undefined; 'http.response.body.content'?: string | undefined; 'http.response.bytes'?: string | number | undefined; 'http.response.mime_type'?: string | undefined; 'http.response.status_code'?: string | number | undefined; 'http.version'?: string | undefined; labels?: unknown; 'log.file.path'?: string | undefined; 'log.level'?: string | undefined; 'log.logger'?: string | undefined; 'log.origin.file.line'?: string | number | undefined; 'log.origin.file.name'?: string | undefined; 'log.origin.function'?: string | undefined; 'log.syslog'?: unknown; message?: string | undefined; 'network.application'?: string | undefined; 'network.bytes'?: string | number | undefined; 'network.community_id'?: string | undefined; 'network.direction'?: string | undefined; 'network.forwarded_ip'?: string | undefined; 'network.iana_number'?: string | undefined; 'network.inner'?: unknown; 'network.name'?: string | undefined; 'network.packets'?: string | number | undefined; 'network.protocol'?: string | undefined; 'network.transport'?: string | undefined; 'network.type'?: string | undefined; 'network.vlan.id'?: string | undefined; 'network.vlan.name'?: string | undefined; 'observer.egress'?: unknown; 'observer.geo.city_name'?: string | undefined; 'observer.geo.continent_code'?: string | undefined; 'observer.geo.continent_name'?: string | undefined; 'observer.geo.country_iso_code'?: string | undefined; 'observer.geo.country_name'?: string | undefined; 'observer.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'observer.geo.name'?: string | undefined; 'observer.geo.postal_code'?: string | undefined; 'observer.geo.region_iso_code'?: string | undefined; 'observer.geo.region_name'?: string | undefined; 'observer.geo.timezone'?: string | undefined; 'observer.hostname'?: string | undefined; 'observer.ingress'?: unknown; 'observer.ip'?: string[] | undefined; 'observer.mac'?: string[] | undefined; 'observer.name'?: string | undefined; 'observer.os.family'?: string | undefined; 'observer.os.full'?: string | undefined; 'observer.os.kernel'?: string | undefined; 'observer.os.name'?: string | undefined; 'observer.os.platform'?: string | undefined; 'observer.os.type'?: string | undefined; 'observer.os.version'?: string | undefined; 'observer.product'?: string | undefined; 'observer.serial_number'?: string | undefined; 'observer.type'?: string | undefined; 'observer.vendor'?: string | undefined; 'observer.version'?: string | undefined; 'orchestrator.api_version'?: string | undefined; 'orchestrator.cluster.id'?: string | undefined; 'orchestrator.cluster.name'?: string | undefined; 'orchestrator.cluster.url'?: string | undefined; 'orchestrator.cluster.version'?: string | undefined; 'orchestrator.namespace'?: string | undefined; 'orchestrator.organization'?: string | undefined; 'orchestrator.resource.annotation'?: string[] | undefined; 'orchestrator.resource.id'?: string | undefined; 'orchestrator.resource.ip'?: string[] | undefined; 'orchestrator.resource.label'?: string[] | undefined; 'orchestrator.resource.name'?: string | undefined; 'orchestrator.resource.parent.type'?: string | undefined; 'orchestrator.resource.type'?: string | undefined; 'orchestrator.type'?: string | undefined; 'organization.id'?: string | undefined; 'organization.name'?: string | undefined; 'package.architecture'?: string | undefined; 'package.build_version'?: string | undefined; 'package.checksum'?: string | undefined; 'package.description'?: string | undefined; 'package.install_scope'?: string | undefined; 'package.installed'?: string | number | undefined; 'package.license'?: string | undefined; 'package.name'?: string | undefined; 'package.path'?: string | undefined; 'package.reference'?: string | undefined; 'package.size'?: string | number | undefined; 'package.type'?: string | undefined; 'package.version'?: string | undefined; 'process.args'?: string[] | undefined; 'process.args_count'?: string | number | undefined; 'process.code_signature.digest_algorithm'?: string | undefined; 'process.code_signature.exists'?: boolean | undefined; 'process.code_signature.signing_id'?: string | undefined; 'process.code_signature.status'?: string | undefined; 'process.code_signature.subject_name'?: string | undefined; 'process.code_signature.team_id'?: string | undefined; 'process.code_signature.timestamp'?: string | number | undefined; 'process.code_signature.trusted'?: boolean | undefined; 'process.code_signature.valid'?: boolean | undefined; 'process.command_line'?: string | undefined; 'process.elf.architecture'?: string | undefined; 'process.elf.byte_order'?: string | undefined; 'process.elf.cpu_type'?: string | undefined; 'process.elf.creation_date'?: string | number | undefined; 'process.elf.exports'?: unknown[] | undefined; 'process.elf.go_import_hash'?: string | undefined; 'process.elf.go_imports'?: unknown; 'process.elf.go_imports_names_entropy'?: string | number | undefined; 'process.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.elf.go_stripped'?: boolean | undefined; 'process.elf.header.abi_version'?: string | undefined; 'process.elf.header.class'?: string | undefined; 'process.elf.header.data'?: string | undefined; 'process.elf.header.entrypoint'?: string | number | undefined; 'process.elf.header.object_version'?: string | undefined; 'process.elf.header.os_abi'?: string | undefined; 'process.elf.header.type'?: string | undefined; 'process.elf.header.version'?: string | undefined; 'process.elf.import_hash'?: string | undefined; 'process.elf.imports'?: unknown[] | undefined; 'process.elf.imports_names_entropy'?: string | number | undefined; 'process.elf.imports_names_var_entropy'?: string | number | undefined; 'process.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.elf.shared_libraries'?: string[] | undefined; 'process.elf.telfhash'?: string | undefined; 'process.end'?: string | number | undefined; 'process.entity_id'?: string | undefined; 'process.entry_leader.args'?: string[] | undefined; 'process.entry_leader.args_count'?: string | number | undefined; 'process.entry_leader.attested_groups.name'?: string | undefined; 'process.entry_leader.attested_user.id'?: string | undefined; 'process.entry_leader.attested_user.name'?: string | undefined; 'process.entry_leader.command_line'?: string | undefined; 'process.entry_leader.entity_id'?: string | undefined; 'process.entry_leader.entry_meta.source.ip'?: string | undefined; 'process.entry_leader.entry_meta.type'?: string | undefined; 'process.entry_leader.executable'?: string | undefined; 'process.entry_leader.group.id'?: string | undefined; 'process.entry_leader.group.name'?: string | undefined; 'process.entry_leader.interactive'?: boolean | undefined; 'process.entry_leader.name'?: string | undefined; 'process.entry_leader.parent.entity_id'?: string | undefined; 'process.entry_leader.parent.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.entity_id'?: string | undefined; 'process.entry_leader.parent.session_leader.pid'?: string | number | undefined; 'process.entry_leader.parent.session_leader.start'?: string | number | undefined; 'process.entry_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.entry_leader.parent.start'?: string | number | undefined; 'process.entry_leader.parent.vpid'?: string | number | undefined; 'process.entry_leader.pid'?: string | number | undefined; 'process.entry_leader.real_group.id'?: string | undefined; 'process.entry_leader.real_group.name'?: string | undefined; 'process.entry_leader.real_user.id'?: string | undefined; 'process.entry_leader.real_user.name'?: string | undefined; 'process.entry_leader.same_as_process'?: boolean | undefined; 'process.entry_leader.saved_group.id'?: string | undefined; 'process.entry_leader.saved_group.name'?: string | undefined; 'process.entry_leader.saved_user.id'?: string | undefined; 'process.entry_leader.saved_user.name'?: string | undefined; 'process.entry_leader.start'?: string | number | undefined; 'process.entry_leader.supplemental_groups.id'?: string | undefined; 'process.entry_leader.supplemental_groups.name'?: string | undefined; 'process.entry_leader.tty'?: unknown; 'process.entry_leader.user.id'?: string | undefined; 'process.entry_leader.user.name'?: string | undefined; 'process.entry_leader.vpid'?: string | number | undefined; 'process.entry_leader.working_directory'?: string | undefined; 'process.env_vars'?: string[] | undefined; 'process.executable'?: string | undefined; 'process.exit_code'?: string | number | undefined; 'process.group_leader.args'?: string[] | undefined; 'process.group_leader.args_count'?: string | number | undefined; 'process.group_leader.command_line'?: string | undefined; 'process.group_leader.entity_id'?: string | undefined; 'process.group_leader.executable'?: string | undefined; 'process.group_leader.group.id'?: string | undefined; 'process.group_leader.group.name'?: string | undefined; 'process.group_leader.interactive'?: boolean | undefined; 'process.group_leader.name'?: string | undefined; 'process.group_leader.pid'?: string | number | undefined; 'process.group_leader.real_group.id'?: string | undefined; 'process.group_leader.real_group.name'?: string | undefined; 'process.group_leader.real_user.id'?: string | undefined; 'process.group_leader.real_user.name'?: string | undefined; 'process.group_leader.same_as_process'?: boolean | undefined; 'process.group_leader.saved_group.id'?: string | undefined; 'process.group_leader.saved_group.name'?: string | undefined; 'process.group_leader.saved_user.id'?: string | undefined; 'process.group_leader.saved_user.name'?: string | undefined; 'process.group_leader.start'?: string | number | undefined; 'process.group_leader.supplemental_groups.id'?: string | undefined; 'process.group_leader.supplemental_groups.name'?: string | undefined; 'process.group_leader.tty'?: unknown; 'process.group_leader.user.id'?: string | undefined; 'process.group_leader.user.name'?: string | undefined; 'process.group_leader.vpid'?: string | number | undefined; 'process.group_leader.working_directory'?: string | undefined; 'process.hash.md5'?: string | undefined; 'process.hash.sha1'?: string | undefined; 'process.hash.sha256'?: string | undefined; 'process.hash.sha384'?: string | undefined; 'process.hash.sha512'?: string | undefined; 'process.hash.ssdeep'?: string | undefined; 'process.hash.tlsh'?: string | undefined; 'process.interactive'?: boolean | undefined; 'process.io'?: unknown; 'process.macho.go_import_hash'?: string | undefined; 'process.macho.go_imports'?: unknown; 'process.macho.go_imports_names_entropy'?: string | number | undefined; 'process.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.macho.go_stripped'?: boolean | undefined; 'process.macho.import_hash'?: string | undefined; 'process.macho.imports'?: unknown[] | undefined; 'process.macho.imports_names_entropy'?: string | number | undefined; 'process.macho.imports_names_var_entropy'?: string | number | undefined; 'process.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.macho.symhash'?: string | undefined; 'process.name'?: string | undefined; 'process.parent.args'?: string[] | undefined; 'process.parent.args_count'?: string | number | undefined; 'process.parent.code_signature.digest_algorithm'?: string | undefined; 'process.parent.code_signature.exists'?: boolean | undefined; 'process.parent.code_signature.signing_id'?: string | undefined; 'process.parent.code_signature.status'?: string | undefined; 'process.parent.code_signature.subject_name'?: string | undefined; 'process.parent.code_signature.team_id'?: string | undefined; 'process.parent.code_signature.timestamp'?: string | number | undefined; 'process.parent.code_signature.trusted'?: boolean | undefined; 'process.parent.code_signature.valid'?: boolean | undefined; 'process.parent.command_line'?: string | undefined; 'process.parent.elf.architecture'?: string | undefined; 'process.parent.elf.byte_order'?: string | undefined; 'process.parent.elf.cpu_type'?: string | undefined; 'process.parent.elf.creation_date'?: string | number | undefined; 'process.parent.elf.exports'?: unknown[] | undefined; 'process.parent.elf.go_import_hash'?: string | undefined; 'process.parent.elf.go_imports'?: unknown; 'process.parent.elf.go_imports_names_entropy'?: string | number | undefined; 'process.parent.elf.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.go_stripped'?: boolean | undefined; 'process.parent.elf.header.abi_version'?: string | undefined; 'process.parent.elf.header.class'?: string | undefined; 'process.parent.elf.header.data'?: string | undefined; 'process.parent.elf.header.entrypoint'?: string | number | undefined; 'process.parent.elf.header.object_version'?: string | undefined; 'process.parent.elf.header.os_abi'?: string | undefined; 'process.parent.elf.header.type'?: string | undefined; 'process.parent.elf.header.version'?: string | undefined; 'process.parent.elf.import_hash'?: string | undefined; 'process.parent.elf.imports'?: unknown[] | undefined; 'process.parent.elf.imports_names_entropy'?: string | number | undefined; 'process.parent.elf.imports_names_var_entropy'?: string | number | undefined; 'process.parent.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'process.parent.elf.shared_libraries'?: string[] | undefined; 'process.parent.elf.telfhash'?: string | undefined; 'process.parent.end'?: string | number | undefined; 'process.parent.entity_id'?: string | undefined; 'process.parent.executable'?: string | undefined; 'process.parent.exit_code'?: string | number | undefined; 'process.parent.group.id'?: string | undefined; 'process.parent.group.name'?: string | undefined; 'process.parent.group_leader.entity_id'?: string | undefined; 'process.parent.group_leader.pid'?: string | number | undefined; 'process.parent.group_leader.start'?: string | number | undefined; 'process.parent.group_leader.vpid'?: string | number | undefined; 'process.parent.hash.md5'?: string | undefined; 'process.parent.hash.sha1'?: string | undefined; 'process.parent.hash.sha256'?: string | undefined; 'process.parent.hash.sha384'?: string | undefined; 'process.parent.hash.sha512'?: string | undefined; 'process.parent.hash.ssdeep'?: string | undefined; 'process.parent.hash.tlsh'?: string | undefined; 'process.parent.interactive'?: boolean | undefined; 'process.parent.macho.go_import_hash'?: string | undefined; 'process.parent.macho.go_imports'?: unknown; 'process.parent.macho.go_imports_names_entropy'?: string | number | undefined; 'process.parent.macho.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.go_stripped'?: boolean | undefined; 'process.parent.macho.import_hash'?: string | undefined; 'process.parent.macho.imports'?: unknown[] | undefined; 'process.parent.macho.imports_names_entropy'?: string | number | undefined; 'process.parent.macho.imports_names_var_entropy'?: string | number | undefined; 'process.parent.macho.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.macho.symhash'?: string | undefined; 'process.parent.name'?: string | undefined; 'process.parent.pe.architecture'?: string | undefined; 'process.parent.pe.company'?: string | undefined; 'process.parent.pe.description'?: string | undefined; 'process.parent.pe.file_version'?: string | undefined; 'process.parent.pe.go_import_hash'?: string | undefined; 'process.parent.pe.go_imports'?: unknown; 'process.parent.pe.go_imports_names_entropy'?: string | number | undefined; 'process.parent.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.go_stripped'?: boolean | undefined; 'process.parent.pe.imphash'?: string | undefined; 'process.parent.pe.import_hash'?: string | undefined; 'process.parent.pe.imports'?: unknown[] | undefined; 'process.parent.pe.imports_names_entropy'?: string | number | undefined; 'process.parent.pe.imports_names_var_entropy'?: string | number | undefined; 'process.parent.pe.original_file_name'?: string | undefined; 'process.parent.pe.pehash'?: string | undefined; 'process.parent.pe.product'?: string | undefined; 'process.parent.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.parent.pgid'?: string | number | undefined; 'process.parent.pid'?: string | number | undefined; 'process.parent.real_group.id'?: string | undefined; 'process.parent.real_group.name'?: string | undefined; 'process.parent.real_user.id'?: string | undefined; 'process.parent.real_user.name'?: string | undefined; 'process.parent.saved_group.id'?: string | undefined; 'process.parent.saved_group.name'?: string | undefined; 'process.parent.saved_user.id'?: string | undefined; 'process.parent.saved_user.name'?: string | undefined; 'process.parent.start'?: string | number | undefined; 'process.parent.supplemental_groups.id'?: string | undefined; 'process.parent.supplemental_groups.name'?: string | undefined; 'process.parent.thread.capabilities.effective'?: string[] | undefined; 'process.parent.thread.capabilities.permitted'?: string[] | undefined; 'process.parent.thread.id'?: string | number | undefined; 'process.parent.thread.name'?: string | undefined; 'process.parent.title'?: string | undefined; 'process.parent.tty'?: unknown; 'process.parent.uptime'?: string | number | undefined; 'process.parent.user.id'?: string | undefined; 'process.parent.user.name'?: string | undefined; 'process.parent.vpid'?: string | number | undefined; 'process.parent.working_directory'?: string | undefined; 'process.pe.architecture'?: string | undefined; 'process.pe.company'?: string | undefined; 'process.pe.description'?: string | undefined; 'process.pe.file_version'?: string | undefined; 'process.pe.go_import_hash'?: string | undefined; 'process.pe.go_imports'?: unknown; 'process.pe.go_imports_names_entropy'?: string | number | undefined; 'process.pe.go_imports_names_var_entropy'?: string | number | undefined; 'process.pe.go_stripped'?: boolean | undefined; 'process.pe.imphash'?: string | undefined; 'process.pe.import_hash'?: string | undefined; 'process.pe.imports'?: unknown[] | undefined; 'process.pe.imports_names_entropy'?: string | number | undefined; 'process.pe.imports_names_var_entropy'?: string | number | undefined; 'process.pe.original_file_name'?: string | undefined; 'process.pe.pehash'?: string | undefined; 'process.pe.product'?: string | undefined; 'process.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'process.pgid'?: string | number | undefined; 'process.pid'?: string | number | undefined; 'process.previous.args'?: string[] | undefined; 'process.previous.args_count'?: string | number | undefined; 'process.previous.executable'?: string | undefined; 'process.real_group.id'?: string | undefined; 'process.real_group.name'?: string | undefined; 'process.real_user.id'?: string | undefined; 'process.real_user.name'?: string | undefined; 'process.saved_group.id'?: string | undefined; 'process.saved_group.name'?: string | undefined; 'process.saved_user.id'?: string | undefined; 'process.saved_user.name'?: string | undefined; 'process.session_leader.args'?: string[] | undefined; 'process.session_leader.args_count'?: string | number | undefined; 'process.session_leader.command_line'?: string | undefined; 'process.session_leader.entity_id'?: string | undefined; 'process.session_leader.executable'?: string | undefined; 'process.session_leader.group.id'?: string | undefined; 'process.session_leader.group.name'?: string | undefined; 'process.session_leader.interactive'?: boolean | undefined; 'process.session_leader.name'?: string | undefined; 'process.session_leader.parent.entity_id'?: string | undefined; 'process.session_leader.parent.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.entity_id'?: string | undefined; 'process.session_leader.parent.session_leader.pid'?: string | number | undefined; 'process.session_leader.parent.session_leader.start'?: string | number | undefined; 'process.session_leader.parent.session_leader.vpid'?: string | number | undefined; 'process.session_leader.parent.start'?: string | number | undefined; 'process.session_leader.parent.vpid'?: string | number | undefined; 'process.session_leader.pid'?: string | number | undefined; 'process.session_leader.real_group.id'?: string | undefined; 'process.session_leader.real_group.name'?: string | undefined; 'process.session_leader.real_user.id'?: string | undefined; 'process.session_leader.real_user.name'?: string | undefined; 'process.session_leader.same_as_process'?: boolean | undefined; 'process.session_leader.saved_group.id'?: string | undefined; 'process.session_leader.saved_group.name'?: string | undefined; 'process.session_leader.saved_user.id'?: string | undefined; 'process.session_leader.saved_user.name'?: string | undefined; 'process.session_leader.start'?: string | number | undefined; 'process.session_leader.supplemental_groups.id'?: string | undefined; 'process.session_leader.supplemental_groups.name'?: string | undefined; 'process.session_leader.tty'?: unknown; 'process.session_leader.user.id'?: string | undefined; 'process.session_leader.user.name'?: string | undefined; 'process.session_leader.vpid'?: string | number | undefined; 'process.session_leader.working_directory'?: string | undefined; 'process.start'?: string | number | undefined; 'process.supplemental_groups.id'?: string | undefined; 'process.supplemental_groups.name'?: string | undefined; 'process.thread.capabilities.effective'?: string[] | undefined; 'process.thread.capabilities.permitted'?: string[] | undefined; 'process.thread.id'?: string | number | undefined; 'process.thread.name'?: string | undefined; 'process.title'?: string | undefined; 'process.tty'?: unknown; 'process.uptime'?: string | number | undefined; 'process.user.id'?: string | undefined; 'process.user.name'?: string | undefined; 'process.vpid'?: string | number | undefined; 'process.working_directory'?: string | undefined; 'registry.data.bytes'?: string | undefined; 'registry.data.strings'?: string[] | undefined; 'registry.data.type'?: string | undefined; 'registry.hive'?: string | undefined; 'registry.key'?: string | undefined; 'registry.path'?: string | undefined; 'registry.value'?: string | undefined; 'related.hash'?: string[] | undefined; 'related.hosts'?: string[] | undefined; 'related.ip'?: string[] | undefined; 'related.user'?: string[] | undefined; 'rule.author'?: string[] | undefined; 'rule.category'?: string | undefined; 'rule.description'?: string | undefined; 'rule.id'?: string | undefined; 'rule.license'?: string | undefined; 'rule.name'?: string | undefined; 'rule.reference'?: string | undefined; 'rule.ruleset'?: string | undefined; 'rule.uuid'?: string | undefined; 'rule.version'?: string | undefined; 'server.address'?: string | undefined; 'server.as.number'?: string | number | undefined; 'server.as.organization.name'?: string | undefined; 'server.bytes'?: string | number | undefined; 'server.domain'?: string | undefined; 'server.geo.city_name'?: string | undefined; 'server.geo.continent_code'?: string | undefined; 'server.geo.continent_name'?: string | undefined; 'server.geo.country_iso_code'?: string | undefined; 'server.geo.country_name'?: string | undefined; 'server.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'server.geo.name'?: string | undefined; 'server.geo.postal_code'?: string | undefined; 'server.geo.region_iso_code'?: string | undefined; 'server.geo.region_name'?: string | undefined; 'server.geo.timezone'?: string | undefined; 'server.ip'?: string | undefined; 'server.mac'?: string | undefined; 'server.nat.ip'?: string | undefined; 'server.nat.port'?: string | number | undefined; 'server.packets'?: string | number | undefined; 'server.port'?: string | number | undefined; 'server.registered_domain'?: string | undefined; 'server.subdomain'?: string | undefined; 'server.top_level_domain'?: string | undefined; 'server.user.domain'?: string | undefined; 'server.user.email'?: string | undefined; 'server.user.full_name'?: string | undefined; 'server.user.group.domain'?: string | undefined; 'server.user.group.id'?: string | undefined; 'server.user.group.name'?: string | undefined; 'server.user.hash'?: string | undefined; 'server.user.id'?: string | undefined; 'server.user.name'?: string | undefined; 'server.user.roles'?: string[] | undefined; 'service.address'?: string | undefined; 'service.environment'?: string | undefined; 'service.ephemeral_id'?: string | undefined; 'service.id'?: string | undefined; 'service.name'?: string | undefined; 'service.node.name'?: string | undefined; 'service.node.role'?: string | undefined; 'service.node.roles'?: string[] | undefined; 'service.origin.address'?: string | undefined; 'service.origin.environment'?: string | undefined; 'service.origin.ephemeral_id'?: string | undefined; 'service.origin.id'?: string | undefined; 'service.origin.name'?: string | undefined; 'service.origin.node.name'?: string | undefined; 'service.origin.node.role'?: string | undefined; 'service.origin.node.roles'?: string[] | undefined; 'service.origin.state'?: string | undefined; 'service.origin.type'?: string | undefined; 'service.origin.version'?: string | undefined; 'service.state'?: string | undefined; 'service.target.address'?: string | undefined; 'service.target.environment'?: string | undefined; 'service.target.ephemeral_id'?: string | undefined; 'service.target.id'?: string | undefined; 'service.target.name'?: string | undefined; 'service.target.node.name'?: string | undefined; 'service.target.node.role'?: string | undefined; 'service.target.node.roles'?: string[] | undefined; 'service.target.state'?: string | undefined; 'service.target.type'?: string | undefined; 'service.target.version'?: string | undefined; 'service.type'?: string | undefined; 'service.version'?: string | undefined; 'source.address'?: string | undefined; 'source.as.number'?: string | number | undefined; 'source.as.organization.name'?: string | undefined; 'source.bytes'?: string | number | undefined; 'source.domain'?: string | undefined; 'source.geo.city_name'?: string | undefined; 'source.geo.continent_code'?: string | undefined; 'source.geo.continent_name'?: string | undefined; 'source.geo.country_iso_code'?: string | undefined; 'source.geo.country_name'?: string | undefined; 'source.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'source.geo.name'?: string | undefined; 'source.geo.postal_code'?: string | undefined; 'source.geo.region_iso_code'?: string | undefined; 'source.geo.region_name'?: string | undefined; 'source.geo.timezone'?: string | undefined; 'source.ip'?: string | undefined; 'source.mac'?: string | undefined; 'source.nat.ip'?: string | undefined; 'source.nat.port'?: string | number | undefined; 'source.packets'?: string | number | undefined; 'source.port'?: string | number | undefined; 'source.registered_domain'?: string | undefined; 'source.subdomain'?: string | undefined; 'source.top_level_domain'?: string | undefined; 'source.user.domain'?: string | undefined; 'source.user.email'?: string | undefined; 'source.user.full_name'?: string | undefined; 'source.user.group.domain'?: string | undefined; 'source.user.group.id'?: string | undefined; 'source.user.group.name'?: string | undefined; 'source.user.hash'?: string | undefined; 'source.user.id'?: string | undefined; 'source.user.name'?: string | undefined; 'source.user.roles'?: string[] | undefined; 'span.id'?: string | undefined; tags?: string[] | undefined; 'threat.enrichments'?: { indicator?: unknown; 'matched.atomic'?: string | undefined; 'matched.field'?: string | undefined; 'matched.id'?: string | undefined; 'matched.index'?: string | undefined; 'matched.occurred'?: string | number | undefined; 'matched.type'?: string | undefined; }[] | undefined; 'threat.feed.dashboard_id'?: string | undefined; 'threat.feed.description'?: string | undefined; 'threat.feed.name'?: string | undefined; 'threat.feed.reference'?: string | undefined; 'threat.framework'?: string | undefined; 'threat.group.alias'?: string[] | undefined; 'threat.group.id'?: string | undefined; 'threat.group.name'?: string | undefined; 'threat.group.reference'?: string | undefined; 'threat.indicator.as.number'?: string | number | undefined; 'threat.indicator.as.organization.name'?: string | undefined; 'threat.indicator.confidence'?: string | undefined; 'threat.indicator.description'?: string | undefined; 'threat.indicator.email.address'?: string | undefined; 'threat.indicator.file.accessed'?: string | number | undefined; 'threat.indicator.file.attributes'?: string[] | undefined; 'threat.indicator.file.code_signature.digest_algorithm'?: string | undefined; 'threat.indicator.file.code_signature.exists'?: boolean | undefined; 'threat.indicator.file.code_signature.signing_id'?: string | undefined; 'threat.indicator.file.code_signature.status'?: string | undefined; 'threat.indicator.file.code_signature.subject_name'?: string | undefined; 'threat.indicator.file.code_signature.team_id'?: string | undefined; 'threat.indicator.file.code_signature.timestamp'?: string | number | undefined; 'threat.indicator.file.code_signature.trusted'?: boolean | undefined; 'threat.indicator.file.code_signature.valid'?: boolean | undefined; 'threat.indicator.file.created'?: string | number | undefined; 'threat.indicator.file.ctime'?: string | number | undefined; 'threat.indicator.file.device'?: string | undefined; 'threat.indicator.file.directory'?: string | undefined; 'threat.indicator.file.drive_letter'?: string | undefined; 'threat.indicator.file.elf.architecture'?: string | undefined; 'threat.indicator.file.elf.byte_order'?: string | undefined; 'threat.indicator.file.elf.cpu_type'?: string | undefined; 'threat.indicator.file.elf.creation_date'?: string | number | undefined; 'threat.indicator.file.elf.exports'?: unknown[] | undefined; 'threat.indicator.file.elf.go_import_hash'?: string | undefined; 'threat.indicator.file.elf.go_imports'?: unknown; 'threat.indicator.file.elf.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.go_stripped'?: boolean | undefined; 'threat.indicator.file.elf.header.abi_version'?: string | undefined; 'threat.indicator.file.elf.header.class'?: string | undefined; 'threat.indicator.file.elf.header.data'?: string | undefined; 'threat.indicator.file.elf.header.entrypoint'?: string | number | undefined; 'threat.indicator.file.elf.header.object_version'?: string | undefined; 'threat.indicator.file.elf.header.os_abi'?: string | undefined; 'threat.indicator.file.elf.header.type'?: string | undefined; 'threat.indicator.file.elf.header.version'?: string | undefined; 'threat.indicator.file.elf.import_hash'?: string | undefined; 'threat.indicator.file.elf.imports'?: unknown[] | undefined; 'threat.indicator.file.elf.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.elf.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.elf.sections'?: { chi2?: string | number | undefined; entropy?: string | number | undefined; flags?: string | undefined; name?: string | undefined; physical_offset?: string | undefined; physical_size?: string | number | undefined; type?: string | undefined; var_entropy?: string | number | undefined; virtual_address?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.elf.segments'?: { sections?: string | undefined; type?: string | undefined; }[] | undefined; 'threat.indicator.file.elf.shared_libraries'?: string[] | undefined; 'threat.indicator.file.elf.telfhash'?: string | undefined; 'threat.indicator.file.extension'?: string | undefined; 'threat.indicator.file.fork_name'?: string | undefined; 'threat.indicator.file.gid'?: string | undefined; 'threat.indicator.file.group'?: string | undefined; 'threat.indicator.file.hash.md5'?: string | undefined; 'threat.indicator.file.hash.sha1'?: string | undefined; 'threat.indicator.file.hash.sha256'?: string | undefined; 'threat.indicator.file.hash.sha384'?: string | undefined; 'threat.indicator.file.hash.sha512'?: string | undefined; 'threat.indicator.file.hash.ssdeep'?: string | undefined; 'threat.indicator.file.hash.tlsh'?: string | undefined; 'threat.indicator.file.inode'?: string | undefined; 'threat.indicator.file.mime_type'?: string | undefined; 'threat.indicator.file.mode'?: string | undefined; 'threat.indicator.file.mtime'?: string | number | undefined; 'threat.indicator.file.name'?: string | undefined; 'threat.indicator.file.owner'?: string | undefined; 'threat.indicator.file.path'?: string | undefined; 'threat.indicator.file.pe.architecture'?: string | undefined; 'threat.indicator.file.pe.company'?: string | undefined; 'threat.indicator.file.pe.description'?: string | undefined; 'threat.indicator.file.pe.file_version'?: string | undefined; 'threat.indicator.file.pe.go_import_hash'?: string | undefined; 'threat.indicator.file.pe.go_imports'?: unknown; 'threat.indicator.file.pe.go_imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.go_stripped'?: boolean | undefined; 'threat.indicator.file.pe.imphash'?: string | undefined; 'threat.indicator.file.pe.import_hash'?: string | undefined; 'threat.indicator.file.pe.imports'?: unknown[] | undefined; 'threat.indicator.file.pe.imports_names_entropy'?: string | number | undefined; 'threat.indicator.file.pe.imports_names_var_entropy'?: string | number | undefined; 'threat.indicator.file.pe.original_file_name'?: string | undefined; 'threat.indicator.file.pe.pehash'?: string | undefined; 'threat.indicator.file.pe.product'?: string | undefined; 'threat.indicator.file.pe.sections'?: { entropy?: string | number | undefined; name?: string | undefined; physical_size?: string | number | undefined; var_entropy?: string | number | undefined; virtual_size?: string | number | undefined; }[] | undefined; 'threat.indicator.file.size'?: string | number | undefined; 'threat.indicator.file.target_path'?: string | undefined; 'threat.indicator.file.type'?: string | undefined; 'threat.indicator.file.uid'?: string | undefined; 'threat.indicator.file.x509.alternative_names'?: string[] | undefined; 'threat.indicator.file.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.file.x509.issuer.country'?: string[] | undefined; 'threat.indicator.file.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.file.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.not_after'?: string | number | undefined; 'threat.indicator.file.x509.not_before'?: string | number | undefined; 'threat.indicator.file.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.file.x509.public_key_curve'?: string | undefined; 'threat.indicator.file.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.file.x509.public_key_size'?: string | number | undefined; 'threat.indicator.file.x509.serial_number'?: string | undefined; 'threat.indicator.file.x509.signature_algorithm'?: string | undefined; 'threat.indicator.file.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.file.x509.subject.country'?: string[] | undefined; 'threat.indicator.file.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.file.x509.subject.locality'?: string[] | undefined; 'threat.indicator.file.x509.subject.organization'?: string[] | undefined; 'threat.indicator.file.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.file.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.file.x509.version_number'?: string | undefined; 'threat.indicator.first_seen'?: string | number | undefined; 'threat.indicator.geo.city_name'?: string | undefined; 'threat.indicator.geo.continent_code'?: string | undefined; 'threat.indicator.geo.continent_name'?: string | undefined; 'threat.indicator.geo.country_iso_code'?: string | undefined; 'threat.indicator.geo.country_name'?: string | undefined; 'threat.indicator.geo.location'?: string | { type: string; coordinates: number[]; } | { lat: number; lon: number; } | { location: number[]; } | { location: string; } | undefined; 'threat.indicator.geo.name'?: string | undefined; 'threat.indicator.geo.postal_code'?: string | undefined; 'threat.indicator.geo.region_iso_code'?: string | undefined; 'threat.indicator.geo.region_name'?: string | undefined; 'threat.indicator.geo.timezone'?: string | undefined; 'threat.indicator.ip'?: string | undefined; 'threat.indicator.last_seen'?: string | number | undefined; 'threat.indicator.marking.tlp'?: string | undefined; 'threat.indicator.marking.tlp_version'?: string | undefined; 'threat.indicator.modified_at'?: string | number | undefined; 'threat.indicator.name'?: string | undefined; 'threat.indicator.port'?: string | number | undefined; 'threat.indicator.provider'?: string | undefined; 'threat.indicator.reference'?: string | undefined; 'threat.indicator.registry.data.bytes'?: string | undefined; 'threat.indicator.registry.data.strings'?: string[] | undefined; 'threat.indicator.registry.data.type'?: string | undefined; 'threat.indicator.registry.hive'?: string | undefined; 'threat.indicator.registry.key'?: string | undefined; 'threat.indicator.registry.path'?: string | undefined; 'threat.indicator.registry.value'?: string | undefined; 'threat.indicator.scanner_stats'?: string | number | undefined; 'threat.indicator.sightings'?: string | number | undefined; 'threat.indicator.type'?: string | undefined; 'threat.indicator.url.domain'?: string | undefined; 'threat.indicator.url.extension'?: string | undefined; 'threat.indicator.url.fragment'?: string | undefined; 'threat.indicator.url.full'?: string | undefined; 'threat.indicator.url.original'?: string | undefined; 'threat.indicator.url.password'?: string | undefined; 'threat.indicator.url.path'?: string | undefined; 'threat.indicator.url.port'?: string | number | undefined; 'threat.indicator.url.query'?: string | undefined; 'threat.indicator.url.registered_domain'?: string | undefined; 'threat.indicator.url.scheme'?: string | undefined; 'threat.indicator.url.subdomain'?: string | undefined; 'threat.indicator.url.top_level_domain'?: string | undefined; 'threat.indicator.url.username'?: string | undefined; 'threat.indicator.x509.alternative_names'?: string[] | undefined; 'threat.indicator.x509.issuer.common_name'?: string[] | undefined; 'threat.indicator.x509.issuer.country'?: string[] | undefined; 'threat.indicator.x509.issuer.distinguished_name'?: string | undefined; 'threat.indicator.x509.issuer.locality'?: string[] | undefined; 'threat.indicator.x509.issuer.organization'?: string[] | undefined; 'threat.indicator.x509.issuer.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.issuer.state_or_province'?: string[] | undefined; 'threat.indicator.x509.not_after'?: string | number | undefined; 'threat.indicator.x509.not_before'?: string | number | undefined; 'threat.indicator.x509.public_key_algorithm'?: string | undefined; 'threat.indicator.x509.public_key_curve'?: string | undefined; 'threat.indicator.x509.public_key_exponent'?: string | number | undefined; 'threat.indicator.x509.public_key_size'?: string | number | undefined; 'threat.indicator.x509.serial_number'?: string | undefined; 'threat.indicator.x509.signature_algorithm'?: string | undefined; 'threat.indicator.x509.subject.common_name'?: string[] | undefined; 'threat.indicator.x509.subject.country'?: string[] | undefined; 'threat.indicator.x509.subject.distinguished_name'?: string | undefined; 'threat.indicator.x509.subject.locality'?: string[] | undefined; 'threat.indicator.x509.subject.organization'?: string[] | undefined; 'threat.indicator.x509.subject.organizational_unit'?: string[] | undefined; 'threat.indicator.x509.subject.state_or_province'?: string[] | undefined; 'threat.indicator.x509.version_number'?: string | undefined; 'threat.software.alias'?: string[] | undefined; 'threat.software.id'?: string | undefined; 'threat.software.name'?: string | undefined; 'threat.software.platforms'?: string[] | undefined; 'threat.software.reference'?: string | undefined; 'threat.software.type'?: string | undefined; 'threat.tactic.id'?: string[] | undefined; 'threat.tactic.name'?: string[] | undefined; 'threat.tactic.reference'?: string[] | undefined; 'threat.technique.id'?: string[] | undefined; 'threat.technique.name'?: string[] | undefined; 'threat.technique.reference'?: string[] | undefined; 'threat.technique.subtechnique.id'?: string[] | undefined; 'threat.technique.subtechnique.name'?: string[] | undefined; 'threat.technique.subtechnique.reference'?: string[] | undefined; 'tls.cipher'?: string | undefined; 'tls.client.certificate'?: string | undefined; 'tls.client.certificate_chain'?: string[] | undefined; 'tls.client.hash.md5'?: string | undefined; 'tls.client.hash.sha1'?: string | undefined; 'tls.client.hash.sha256'?: string | undefined; 'tls.client.issuer'?: string | undefined; 'tls.client.ja3'?: string | undefined; 'tls.client.not_after'?: string | number | undefined; 'tls.client.not_before'?: string | number | undefined; 'tls.client.server_name'?: string | undefined; 'tls.client.subject'?: string | undefined; 'tls.client.supported_ciphers'?: string[] | undefined; 'tls.client.x509.alternative_names'?: string[] | undefined; 'tls.client.x509.issuer.common_name'?: string[] | undefined; 'tls.client.x509.issuer.country'?: string[] | undefined; 'tls.client.x509.issuer.distinguished_name'?: string | undefined; 'tls.client.x509.issuer.locality'?: string[] | undefined; 'tls.client.x509.issuer.organization'?: string[] | undefined; 'tls.client.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.client.x509.issuer.state_or_province'?: string[] | undefined; 'tls.client.x509.not_after'?: string | number | undefined; 'tls.client.x509.not_before'?: string | number | undefined; 'tls.client.x509.public_key_algorithm'?: string | undefined; 'tls.client.x509.public_key_curve'?: string | undefined; 'tls.client.x509.public_key_exponent'?: string | number | undefined; 'tls.client.x509.public_key_size'?: string | number | undefined; 'tls.client.x509.serial_number'?: string | undefined; 'tls.client.x509.signature_algorithm'?: string | undefined; 'tls.client.x509.subject.common_name'?: string[] | undefined; 'tls.client.x509.subject.country'?: string[] | undefined; 'tls.client.x509.subject.distinguished_name'?: string | undefined; 'tls.client.x509.subject.locality'?: string[] | undefined; 'tls.client.x509.subject.organization'?: string[] | undefined; 'tls.client.x509.subject.organizational_unit'?: string[] | undefined; 'tls.client.x509.subject.state_or_province'?: string[] | undefined; 'tls.client.x509.version_number'?: string | undefined; 'tls.curve'?: string | undefined; 'tls.established'?: boolean | undefined; 'tls.next_protocol'?: string | undefined; 'tls.resumed'?: boolean | undefined; 'tls.server.certificate'?: string | undefined; 'tls.server.certificate_chain'?: string[] | undefined; 'tls.server.hash.md5'?: string | undefined; 'tls.server.hash.sha1'?: string | undefined; 'tls.server.hash.sha256'?: string | undefined; 'tls.server.issuer'?: string | undefined; 'tls.server.ja3s'?: string | undefined; 'tls.server.not_after'?: string | number | undefined; 'tls.server.not_before'?: string | number | undefined; 'tls.server.subject'?: string | undefined; 'tls.server.x509.alternative_names'?: string[] | undefined; 'tls.server.x509.issuer.common_name'?: string[] | undefined; 'tls.server.x509.issuer.country'?: string[] | undefined; 'tls.server.x509.issuer.distinguished_name'?: string | undefined; 'tls.server.x509.issuer.locality'?: string[] | undefined; 'tls.server.x509.issuer.organization'?: string[] | undefined; 'tls.server.x509.issuer.organizational_unit'?: string[] | undefined; 'tls.server.x509.issuer.state_or_province'?: string[] | undefined; 'tls.server.x509.not_after'?: string | number | undefined; 'tls.server.x509.not_before'?: string | number | undefined; 'tls.server.x509.public_key_algorithm'?: string | undefined; 'tls.server.x509.public_key_curve'?: string | undefined; 'tls.server.x509.public_key_exponent'?: string | number | undefined; 'tls.server.x509.public_key_size'?: string | number | undefined; 'tls.server.x509.serial_number'?: string | undefined; 'tls.server.x509.signature_algorithm'?: string | undefined; 'tls.server.x509.subject.common_name'?: string[] | undefined; 'tls.server.x509.subject.country'?: string[] | undefined; 'tls.server.x509.subject.distinguished_name'?: string | undefined; 'tls.server.x509.subject.locality'?: string[] | undefined; 'tls.server.x509.subject.organization'?: string[] | undefined; 'tls.server.x509.subject.organizational_unit'?: string[] | undefined; 'tls.server.x509.subject.state_or_province'?: string[] | undefined; 'tls.server.x509.version_number'?: string | undefined; 'tls.version'?: string | undefined; 'tls.version_protocol'?: string | undefined; 'trace.id'?: string | undefined; 'transaction.id'?: string | undefined; 'url.domain'?: string | undefined; 'url.extension'?: string | undefined; 'url.fragment'?: string | undefined; 'url.full'?: string | undefined; 'url.original'?: string | undefined; 'url.password'?: string | undefined; 'url.path'?: string | undefined; 'url.port'?: string | number | undefined; 'url.query'?: string | undefined; 'url.registered_domain'?: string | undefined; 'url.scheme'?: string | undefined; 'url.subdomain'?: string | undefined; 'url.top_level_domain'?: string | undefined; 'url.username'?: string | undefined; 'user.changes.domain'?: string | undefined; 'user.changes.email'?: string | undefined; 'user.changes.full_name'?: string | undefined; 'user.changes.group.domain'?: string | undefined; 'user.changes.group.id'?: string | undefined; 'user.changes.group.name'?: string | undefined; 'user.changes.hash'?: string | undefined; 'user.changes.id'?: string | undefined; 'user.changes.name'?: string | undefined; 'user.changes.roles'?: string[] | undefined; 'user.domain'?: string | undefined; 'user.effective.domain'?: string | undefined; 'user.effective.email'?: string | undefined; 'user.effective.full_name'?: string | undefined; 'user.effective.group.domain'?: string | undefined; 'user.effective.group.id'?: string | undefined; 'user.effective.group.name'?: string | undefined; 'user.effective.hash'?: string | undefined; 'user.effective.id'?: string | undefined; 'user.effective.name'?: string | undefined; 'user.effective.roles'?: string[] | undefined; 'user.email'?: string | undefined; 'user.full_name'?: string | undefined; 'user.group.domain'?: string | undefined; 'user.group.id'?: string | undefined; 'user.group.name'?: string | undefined; 'user.hash'?: string | undefined; 'user.id'?: string | undefined; 'user.name'?: string | undefined; 'user.risk.calculated_level'?: string | undefined; 'user.risk.calculated_score'?: number | undefined; 'user.risk.calculated_score_norm'?: number | undefined; 'user.risk.static_level'?: string | undefined; 'user.risk.static_score'?: number | undefined; 'user.risk.static_score_norm'?: number | undefined; 'user.roles'?: string[] | undefined; 'user.target.domain'?: string | undefined; 'user.target.email'?: string | undefined; 'user.target.full_name'?: string | undefined; 'user.target.group.domain'?: string | undefined; 'user.target.group.id'?: string | undefined; 'user.target.group.name'?: string | undefined; 'user.target.hash'?: string | undefined; 'user.target.id'?: string | undefined; 'user.target.name'?: string | undefined; 'user.target.roles'?: string[] | undefined; 'user_agent.device.name'?: string | undefined; 'user_agent.name'?: string | undefined; 'user_agent.original'?: string | undefined; 'user_agent.os.family'?: string | undefined; 'user_agent.os.full'?: string | undefined; 'user_agent.os.kernel'?: string | undefined; 'user_agent.os.name'?: string | undefined; 'user_agent.os.platform'?: string | undefined; 'user_agent.os.type'?: string | undefined; 'user_agent.os.version'?: string | undefined; 'user_agent.version'?: string | undefined; 'vulnerability.category'?: string[] | undefined; 'vulnerability.classification'?: string | undefined; 'vulnerability.description'?: string | undefined; 'vulnerability.enumeration'?: string | undefined; 'vulnerability.id'?: string | undefined; 'vulnerability.reference'?: string | undefined; 'vulnerability.report_id'?: string | undefined; 'vulnerability.scanner.vendor'?: string | undefined; 'vulnerability.score.base'?: number | undefined; 'vulnerability.score.environmental'?: number | undefined; 'vulnerability.score.temporal'?: number | undefined; 'vulnerability.score.version'?: string | undefined; 'vulnerability.severity'?: string | undefined; } & {} & { 'ecs.version'?: string | undefined; 'kibana.alert.risk_score'?: number | undefined; 'kibana.alert.rule.author'?: string | undefined; 'kibana.alert.rule.created_at'?: string | number | undefined; 'kibana.alert.rule.created_by'?: string | undefined; 'kibana.alert.rule.description'?: string | undefined; 'kibana.alert.rule.enabled'?: string | undefined; 'kibana.alert.rule.from'?: string | undefined; 'kibana.alert.rule.interval'?: string | undefined; 'kibana.alert.rule.license'?: string | undefined; 'kibana.alert.rule.note'?: string | undefined; 'kibana.alert.rule.references'?: string[] | undefined; 'kibana.alert.rule.rule_id'?: string | undefined; 'kibana.alert.rule.rule_name_override'?: string | undefined; 'kibana.alert.rule.to'?: string | undefined; 'kibana.alert.rule.type'?: string | undefined; 'kibana.alert.rule.updated_at'?: string | number | undefined; 'kibana.alert.rule.updated_by'?: string | undefined; 'kibana.alert.rule.version'?: string | undefined; 'kibana.alert.severity'?: string | undefined; 'kibana.alert.suppression.docs_count'?: string | number | undefined; 'kibana.alert.suppression.end'?: string | number | undefined; 'kibana.alert.suppression.start'?: string | number | undefined; 'kibana.alert.suppression.terms.field'?: string[] | undefined; 'kibana.alert.suppression.terms.value'?: string[] | undefined; 'kibana.alert.system_status'?: string | undefined; 'kibana.alert.workflow_reason'?: string | undefined; 'kibana.alert.workflow_status_updated_at'?: string | number | undefined; 'kibana.alert.workflow_user'?: string | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/security_schema.ts",
"deprecated": false,
@@ -450,7 +450,7 @@
"label": "StackAlert",
"description": [],
"signature": [
- "{} & { 'kibana.alert.evaluation.conditions'?: string | undefined; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | undefined; 'kibana.alert.title'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
+ "{} & { 'kibana.alert.evaluation.conditions'?: string | undefined; 'kibana.alert.evaluation.threshold'?: string | number | undefined; 'kibana.alert.evaluation.value'?: string | undefined; 'kibana.alert.title'?: string | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/stack_schema.ts",
"deprecated": false,
@@ -465,7 +465,7 @@
"label": "TransformHealthAlert",
"description": [],
"signature": [
- "{} & { 'kibana.alert.results'?: { description?: string | undefined; health_status?: string | undefined; issues?: unknown; node_name?: string | undefined; transform_id?: string | undefined; transform_state?: string | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
+ "{} & { 'kibana.alert.results'?: { description?: string | undefined; health_status?: string | undefined; issues?: unknown; node_name?: string | undefined; transform_id?: string | undefined; transform_state?: string | undefined; }[] | undefined; } & { '@timestamp': string | number; 'kibana.alert.instance.id': string; 'kibana.alert.rule.category': string; 'kibana.alert.rule.consumer': string; 'kibana.alert.rule.name': string; 'kibana.alert.rule.producer': string; 'kibana.alert.rule.revision': string | number; 'kibana.alert.rule.rule_type_id': string; 'kibana.alert.rule.uuid': string; 'kibana.alert.status': string; 'kibana.alert.uuid': string; 'kibana.space_ids': string[]; } & { 'event.action'?: string | undefined; 'event.kind'?: string | undefined; 'kibana.alert.action_group'?: string | undefined; 'kibana.alert.case_ids'?: string[] | undefined; 'kibana.alert.consecutive_matches'?: string | number | undefined; 'kibana.alert.duration.us'?: string | number | undefined; 'kibana.alert.end'?: string | number | undefined; 'kibana.alert.flapping'?: boolean | undefined; 'kibana.alert.flapping_history'?: boolean[] | undefined; 'kibana.alert.last_detected'?: string | number | undefined; 'kibana.alert.maintenance_window_ids'?: string[] | undefined; 'kibana.alert.reason'?: string | undefined; 'kibana.alert.rule.execution.uuid'?: string | undefined; 'kibana.alert.rule.parameters'?: unknown; 'kibana.alert.rule.tags'?: string[] | undefined; 'kibana.alert.start'?: string | number | undefined; 'kibana.alert.time_range'?: { gte?: string | number | undefined; lte?: string | number | undefined; } | undefined; 'kibana.alert.url'?: string | undefined; 'kibana.alert.workflow_assignee_ids'?: string[] | undefined; 'kibana.alert.workflow_status'?: string | undefined; 'kibana.alert.workflow_tags'?: string[] | undefined; 'kibana.version'?: string | undefined; tags?: string[] | undefined; }"
],
"path": "packages/kbn-alerts-as-data-utils/src/schemas/generated/transform_health_schema.ts",
"deprecated": false,
@@ -482,7 +482,7 @@
"label": "alertFieldMap",
"description": [],
"signature": [
- "{ readonly \"kibana.alert.action_group\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.case_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.duration.us\": { readonly type: \"long\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.end\": { readonly type: \"date\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping\": { readonly type: \"boolean\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping_history\": { readonly type: \"boolean\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.maintenance_window_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.instance.id\": { readonly type: \"keyword\"; readonly array: false; readonly required: true; }; readonly \"kibana.alert.last_detected\": { readonly type: \"date\"; readonly required: false; readonly array: false; }; readonly \"kibana.alert.reason\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; readonly multi_fields: ",
+ "{ readonly \"kibana.alert.action_group\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.case_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.duration.us\": { readonly type: \"long\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.end\": { readonly type: \"date\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping\": { readonly type: \"boolean\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.flapping_history\": { readonly type: \"boolean\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.maintenance_window_ids\": { readonly type: \"keyword\"; readonly array: true; readonly required: false; }; readonly \"kibana.alert.consecutive_matches\": { readonly type: \"long\"; readonly array: false; readonly required: false; }; readonly \"kibana.alert.instance.id\": { readonly type: \"keyword\"; readonly array: false; readonly required: true; }; readonly \"kibana.alert.last_detected\": { readonly type: \"date\"; readonly required: false; readonly array: false; }; readonly \"kibana.alert.reason\": { readonly type: \"keyword\"; readonly array: false; readonly required: false; readonly multi_fields: ",
{
"pluginId": "@kbn/alerts-as-data-utils",
"scope": "common",
diff --git a/api_docs/kbn_alerts_as_data_utils.mdx b/api_docs/kbn_alerts_as_data_utils.mdx
index f8a2567bcb87..6530056c9f6a 100644
--- a/api_docs/kbn_alerts_as_data_utils.mdx
+++ b/api_docs/kbn_alerts_as_data_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-alerts-as-data-utils
title: "@kbn/alerts-as-data-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/alerts-as-data-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/alerts-as-data-utils']
---
import kbnAlertsAsDataUtilsObj from './kbn_alerts_as_data_utils.devdocs.json';
diff --git a/api_docs/kbn_alerts_ui_shared.mdx b/api_docs/kbn_alerts_ui_shared.mdx
index 66ec9b67b79d..fb8bc2f0e847 100644
--- a/api_docs/kbn_alerts_ui_shared.mdx
+++ b/api_docs/kbn_alerts_ui_shared.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-alerts-ui-shared
title: "@kbn/alerts-ui-shared"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/alerts-ui-shared plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/alerts-ui-shared']
---
import kbnAlertsUiSharedObj from './kbn_alerts_ui_shared.devdocs.json';
diff --git a/api_docs/kbn_analytics.mdx b/api_docs/kbn_analytics.mdx
index 19de89b592de..6f5df3094918 100644
--- a/api_docs/kbn_analytics.mdx
+++ b/api_docs/kbn_analytics.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics
title: "@kbn/analytics"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics']
---
import kbnAnalyticsObj from './kbn_analytics.devdocs.json';
diff --git a/api_docs/kbn_analytics_client.devdocs.json b/api_docs/kbn_analytics_client.devdocs.json
index 68d5d3159f9f..7c98f0472f4e 100644
--- a/api_docs/kbn_analytics_client.devdocs.json
+++ b/api_docs/kbn_analytics_client.devdocs.json
@@ -894,10 +894,6 @@
"plugin": "apm",
"path": "x-pack/plugins/observability_solution/apm/public/services/telemetry/telemetry_client.ts"
},
- {
- "plugin": "observabilityAIAssistant",
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/mock.tsx"
- },
{
"plugin": "observabilityAIAssistant",
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/service/create_chat_service.test.ts"
@@ -1082,14 +1078,6 @@
"plugin": "@kbn/core-analytics-server-mocks",
"path": "packages/core/analytics/core-analytics-server-mocks/src/analytics_service.mock.ts"
},
- {
- "plugin": "observabilityAIAssistant",
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.test.ts"
- },
- {
- "plugin": "observabilityAIAssistant",
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/service/create_mock_chat_service.ts"
- },
{
"plugin": "@kbn/core-analytics-browser-internal",
"path": "packages/core/analytics/core-analytics-browser-internal/src/analytics_service.test.mocks.ts"
diff --git a/api_docs/kbn_analytics_client.mdx b/api_docs/kbn_analytics_client.mdx
index 3e7fa8254565..20282ff065a1 100644
--- a/api_docs/kbn_analytics_client.mdx
+++ b/api_docs/kbn_analytics_client.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics-client
title: "@kbn/analytics-client"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics-client plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics-client']
---
import kbnAnalyticsClientObj from './kbn_analytics_client.devdocs.json';
diff --git a/api_docs/kbn_analytics_collection_utils.mdx b/api_docs/kbn_analytics_collection_utils.mdx
index 3a14e8b91017..e9453eb5e2d6 100644
--- a/api_docs/kbn_analytics_collection_utils.mdx
+++ b/api_docs/kbn_analytics_collection_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics-collection-utils
title: "@kbn/analytics-collection-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics-collection-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics-collection-utils']
---
import kbnAnalyticsCollectionUtilsObj from './kbn_analytics_collection_utils.devdocs.json';
diff --git a/api_docs/kbn_analytics_shippers_elastic_v3_browser.mdx b/api_docs/kbn_analytics_shippers_elastic_v3_browser.mdx
index 8850b2ed0c0e..86741f3cca85 100644
--- a/api_docs/kbn_analytics_shippers_elastic_v3_browser.mdx
+++ b/api_docs/kbn_analytics_shippers_elastic_v3_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics-shippers-elastic-v3-browser
title: "@kbn/analytics-shippers-elastic-v3-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics-shippers-elastic-v3-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics-shippers-elastic-v3-browser']
---
import kbnAnalyticsShippersElasticV3BrowserObj from './kbn_analytics_shippers_elastic_v3_browser.devdocs.json';
diff --git a/api_docs/kbn_analytics_shippers_elastic_v3_common.mdx b/api_docs/kbn_analytics_shippers_elastic_v3_common.mdx
index 2aa5fcdb5220..ecac0891f976 100644
--- a/api_docs/kbn_analytics_shippers_elastic_v3_common.mdx
+++ b/api_docs/kbn_analytics_shippers_elastic_v3_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics-shippers-elastic-v3-common
title: "@kbn/analytics-shippers-elastic-v3-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics-shippers-elastic-v3-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics-shippers-elastic-v3-common']
---
import kbnAnalyticsShippersElasticV3CommonObj from './kbn_analytics_shippers_elastic_v3_common.devdocs.json';
diff --git a/api_docs/kbn_analytics_shippers_elastic_v3_server.mdx b/api_docs/kbn_analytics_shippers_elastic_v3_server.mdx
index dea6f211d557..46b1533a4dfa 100644
--- a/api_docs/kbn_analytics_shippers_elastic_v3_server.mdx
+++ b/api_docs/kbn_analytics_shippers_elastic_v3_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics-shippers-elastic-v3-server
title: "@kbn/analytics-shippers-elastic-v3-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics-shippers-elastic-v3-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics-shippers-elastic-v3-server']
---
import kbnAnalyticsShippersElasticV3ServerObj from './kbn_analytics_shippers_elastic_v3_server.devdocs.json';
diff --git a/api_docs/kbn_analytics_shippers_fullstory.mdx b/api_docs/kbn_analytics_shippers_fullstory.mdx
index 183e326717cb..fc19d56598ec 100644
--- a/api_docs/kbn_analytics_shippers_fullstory.mdx
+++ b/api_docs/kbn_analytics_shippers_fullstory.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-analytics-shippers-fullstory
title: "@kbn/analytics-shippers-fullstory"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/analytics-shippers-fullstory plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/analytics-shippers-fullstory']
---
import kbnAnalyticsShippersFullstoryObj from './kbn_analytics_shippers_fullstory.devdocs.json';
diff --git a/api_docs/kbn_apm_config_loader.mdx b/api_docs/kbn_apm_config_loader.mdx
index 21015ce081c8..91568f583f99 100644
--- a/api_docs/kbn_apm_config_loader.mdx
+++ b/api_docs/kbn_apm_config_loader.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-apm-config-loader
title: "@kbn/apm-config-loader"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/apm-config-loader plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/apm-config-loader']
---
import kbnApmConfigLoaderObj from './kbn_apm_config_loader.devdocs.json';
diff --git a/api_docs/kbn_apm_synthtrace.mdx b/api_docs/kbn_apm_synthtrace.mdx
index 6d56005ff387..d0d17dbf6d93 100644
--- a/api_docs/kbn_apm_synthtrace.mdx
+++ b/api_docs/kbn_apm_synthtrace.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-apm-synthtrace
title: "@kbn/apm-synthtrace"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/apm-synthtrace plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/apm-synthtrace']
---
import kbnApmSynthtraceObj from './kbn_apm_synthtrace.devdocs.json';
diff --git a/api_docs/kbn_apm_synthtrace_client.mdx b/api_docs/kbn_apm_synthtrace_client.mdx
index f0ca6c7d415a..3de972badb86 100644
--- a/api_docs/kbn_apm_synthtrace_client.mdx
+++ b/api_docs/kbn_apm_synthtrace_client.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-apm-synthtrace-client
title: "@kbn/apm-synthtrace-client"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/apm-synthtrace-client plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/apm-synthtrace-client']
---
import kbnApmSynthtraceClientObj from './kbn_apm_synthtrace_client.devdocs.json';
diff --git a/api_docs/kbn_apm_utils.mdx b/api_docs/kbn_apm_utils.mdx
index 0526ca6930a6..8a5519180024 100644
--- a/api_docs/kbn_apm_utils.mdx
+++ b/api_docs/kbn_apm_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-apm-utils
title: "@kbn/apm-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/apm-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/apm-utils']
---
import kbnApmUtilsObj from './kbn_apm_utils.devdocs.json';
diff --git a/api_docs/kbn_axe_config.mdx b/api_docs/kbn_axe_config.mdx
index 144a1a6d338d..9f7d780e341c 100644
--- a/api_docs/kbn_axe_config.mdx
+++ b/api_docs/kbn_axe_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-axe-config
title: "@kbn/axe-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/axe-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/axe-config']
---
import kbnAxeConfigObj from './kbn_axe_config.devdocs.json';
diff --git a/api_docs/kbn_bfetch_error.mdx b/api_docs/kbn_bfetch_error.mdx
index b72879c2877f..f81edbf8df45 100644
--- a/api_docs/kbn_bfetch_error.mdx
+++ b/api_docs/kbn_bfetch_error.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-bfetch-error
title: "@kbn/bfetch-error"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/bfetch-error plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/bfetch-error']
---
import kbnBfetchErrorObj from './kbn_bfetch_error.devdocs.json';
diff --git a/api_docs/kbn_calculate_auto.mdx b/api_docs/kbn_calculate_auto.mdx
index 4024eb717bf7..9119957079a4 100644
--- a/api_docs/kbn_calculate_auto.mdx
+++ b/api_docs/kbn_calculate_auto.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-calculate-auto
title: "@kbn/calculate-auto"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/calculate-auto plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/calculate-auto']
---
import kbnCalculateAutoObj from './kbn_calculate_auto.devdocs.json';
diff --git a/api_docs/kbn_calculate_width_from_char_count.mdx b/api_docs/kbn_calculate_width_from_char_count.mdx
index 15f072839edb..921b49a76a7a 100644
--- a/api_docs/kbn_calculate_width_from_char_count.mdx
+++ b/api_docs/kbn_calculate_width_from_char_count.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-calculate-width-from-char-count
title: "@kbn/calculate-width-from-char-count"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/calculate-width-from-char-count plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/calculate-width-from-char-count']
---
import kbnCalculateWidthFromCharCountObj from './kbn_calculate_width_from_char_count.devdocs.json';
diff --git a/api_docs/kbn_cases_components.mdx b/api_docs/kbn_cases_components.mdx
index 62d3eb36add2..d3d2085a36c6 100644
--- a/api_docs/kbn_cases_components.mdx
+++ b/api_docs/kbn_cases_components.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-cases-components
title: "@kbn/cases-components"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/cases-components plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/cases-components']
---
import kbnCasesComponentsObj from './kbn_cases_components.devdocs.json';
diff --git a/api_docs/kbn_cell_actions.mdx b/api_docs/kbn_cell_actions.mdx
index d1211db762e0..888fb4472fec 100644
--- a/api_docs/kbn_cell_actions.mdx
+++ b/api_docs/kbn_cell_actions.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-cell-actions
title: "@kbn/cell-actions"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/cell-actions plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/cell-actions']
---
import kbnCellActionsObj from './kbn_cell_actions.devdocs.json';
diff --git a/api_docs/kbn_chart_expressions_common.mdx b/api_docs/kbn_chart_expressions_common.mdx
index 43b146f18bad..200bad1f0871 100644
--- a/api_docs/kbn_chart_expressions_common.mdx
+++ b/api_docs/kbn_chart_expressions_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-chart-expressions-common
title: "@kbn/chart-expressions-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/chart-expressions-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/chart-expressions-common']
---
import kbnChartExpressionsCommonObj from './kbn_chart_expressions_common.devdocs.json';
diff --git a/api_docs/kbn_chart_icons.mdx b/api_docs/kbn_chart_icons.mdx
index 2ce84a19feb0..98c1c3b01833 100644
--- a/api_docs/kbn_chart_icons.mdx
+++ b/api_docs/kbn_chart_icons.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-chart-icons
title: "@kbn/chart-icons"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/chart-icons plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/chart-icons']
---
import kbnChartIconsObj from './kbn_chart_icons.devdocs.json';
diff --git a/api_docs/kbn_ci_stats_core.mdx b/api_docs/kbn_ci_stats_core.mdx
index 4d99633ed8e4..97d033c0a578 100644
--- a/api_docs/kbn_ci_stats_core.mdx
+++ b/api_docs/kbn_ci_stats_core.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ci-stats-core
title: "@kbn/ci-stats-core"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ci-stats-core plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ci-stats-core']
---
import kbnCiStatsCoreObj from './kbn_ci_stats_core.devdocs.json';
diff --git a/api_docs/kbn_ci_stats_performance_metrics.mdx b/api_docs/kbn_ci_stats_performance_metrics.mdx
index ba29313e6765..7b3a5a64d824 100644
--- a/api_docs/kbn_ci_stats_performance_metrics.mdx
+++ b/api_docs/kbn_ci_stats_performance_metrics.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ci-stats-performance-metrics
title: "@kbn/ci-stats-performance-metrics"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ci-stats-performance-metrics plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ci-stats-performance-metrics']
---
import kbnCiStatsPerformanceMetricsObj from './kbn_ci_stats_performance_metrics.devdocs.json';
diff --git a/api_docs/kbn_ci_stats_reporter.mdx b/api_docs/kbn_ci_stats_reporter.mdx
index 4b9b949e6da0..0aceebc960be 100644
--- a/api_docs/kbn_ci_stats_reporter.mdx
+++ b/api_docs/kbn_ci_stats_reporter.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ci-stats-reporter
title: "@kbn/ci-stats-reporter"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ci-stats-reporter plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ci-stats-reporter']
---
import kbnCiStatsReporterObj from './kbn_ci_stats_reporter.devdocs.json';
diff --git a/api_docs/kbn_cli_dev_mode.mdx b/api_docs/kbn_cli_dev_mode.mdx
index 7348a45d5c7b..5147d7bc5883 100644
--- a/api_docs/kbn_cli_dev_mode.mdx
+++ b/api_docs/kbn_cli_dev_mode.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-cli-dev-mode
title: "@kbn/cli-dev-mode"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/cli-dev-mode plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/cli-dev-mode']
---
import kbnCliDevModeObj from './kbn_cli_dev_mode.devdocs.json';
diff --git a/api_docs/kbn_code_editor.mdx b/api_docs/kbn_code_editor.mdx
index bad5e15f4cc0..53b20d176abd 100644
--- a/api_docs/kbn_code_editor.mdx
+++ b/api_docs/kbn_code_editor.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-code-editor
title: "@kbn/code-editor"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/code-editor plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/code-editor']
---
import kbnCodeEditorObj from './kbn_code_editor.devdocs.json';
diff --git a/api_docs/kbn_code_editor_mock.mdx b/api_docs/kbn_code_editor_mock.mdx
index 838538ce2791..66ed7f0ac855 100644
--- a/api_docs/kbn_code_editor_mock.mdx
+++ b/api_docs/kbn_code_editor_mock.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-code-editor-mock
title: "@kbn/code-editor-mock"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/code-editor-mock plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/code-editor-mock']
---
import kbnCodeEditorMockObj from './kbn_code_editor_mock.devdocs.json';
diff --git a/api_docs/kbn_code_owners.mdx b/api_docs/kbn_code_owners.mdx
index 6891dd2af98f..4432026606c4 100644
--- a/api_docs/kbn_code_owners.mdx
+++ b/api_docs/kbn_code_owners.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-code-owners
title: "@kbn/code-owners"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/code-owners plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/code-owners']
---
import kbnCodeOwnersObj from './kbn_code_owners.devdocs.json';
diff --git a/api_docs/kbn_coloring.mdx b/api_docs/kbn_coloring.mdx
index 0362756c0645..a02a10834d6a 100644
--- a/api_docs/kbn_coloring.mdx
+++ b/api_docs/kbn_coloring.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-coloring
title: "@kbn/coloring"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/coloring plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/coloring']
---
import kbnColoringObj from './kbn_coloring.devdocs.json';
diff --git a/api_docs/kbn_config.mdx b/api_docs/kbn_config.mdx
index 16a321a5eecb..03ccb530ba63 100644
--- a/api_docs/kbn_config.mdx
+++ b/api_docs/kbn_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-config
title: "@kbn/config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/config']
---
import kbnConfigObj from './kbn_config.devdocs.json';
diff --git a/api_docs/kbn_config_mocks.mdx b/api_docs/kbn_config_mocks.mdx
index 9f8bea94e5dc..71d58e334604 100644
--- a/api_docs/kbn_config_mocks.mdx
+++ b/api_docs/kbn_config_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-config-mocks
title: "@kbn/config-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/config-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/config-mocks']
---
import kbnConfigMocksObj from './kbn_config_mocks.devdocs.json';
diff --git a/api_docs/kbn_config_schema.mdx b/api_docs/kbn_config_schema.mdx
index 0c08802d3e75..3df4cc30a54a 100644
--- a/api_docs/kbn_config_schema.mdx
+++ b/api_docs/kbn_config_schema.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-config-schema
title: "@kbn/config-schema"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/config-schema plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/config-schema']
---
import kbnConfigSchemaObj from './kbn_config_schema.devdocs.json';
diff --git a/api_docs/kbn_content_management_content_editor.mdx b/api_docs/kbn_content_management_content_editor.mdx
index b099b1c7c190..a200dc004208 100644
--- a/api_docs/kbn_content_management_content_editor.mdx
+++ b/api_docs/kbn_content_management_content_editor.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-content-management-content-editor
title: "@kbn/content-management-content-editor"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/content-management-content-editor plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/content-management-content-editor']
---
import kbnContentManagementContentEditorObj from './kbn_content_management_content_editor.devdocs.json';
diff --git a/api_docs/kbn_content_management_tabbed_table_list_view.mdx b/api_docs/kbn_content_management_tabbed_table_list_view.mdx
index 6f141b46c407..b2f9adc10126 100644
--- a/api_docs/kbn_content_management_tabbed_table_list_view.mdx
+++ b/api_docs/kbn_content_management_tabbed_table_list_view.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-content-management-tabbed-table-list-view
title: "@kbn/content-management-tabbed-table-list-view"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/content-management-tabbed-table-list-view plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/content-management-tabbed-table-list-view']
---
import kbnContentManagementTabbedTableListViewObj from './kbn_content_management_tabbed_table_list_view.devdocs.json';
diff --git a/api_docs/kbn_content_management_table_list_view.mdx b/api_docs/kbn_content_management_table_list_view.mdx
index 7c3520bc22c4..c77412e15a75 100644
--- a/api_docs/kbn_content_management_table_list_view.mdx
+++ b/api_docs/kbn_content_management_table_list_view.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-content-management-table-list-view
title: "@kbn/content-management-table-list-view"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/content-management-table-list-view plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/content-management-table-list-view']
---
import kbnContentManagementTableListViewObj from './kbn_content_management_table_list_view.devdocs.json';
diff --git a/api_docs/kbn_content_management_table_list_view_common.mdx b/api_docs/kbn_content_management_table_list_view_common.mdx
index 378a7638d16a..31d90bdbe16c 100644
--- a/api_docs/kbn_content_management_table_list_view_common.mdx
+++ b/api_docs/kbn_content_management_table_list_view_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-content-management-table-list-view-common
title: "@kbn/content-management-table-list-view-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/content-management-table-list-view-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/content-management-table-list-view-common']
---
import kbnContentManagementTableListViewCommonObj from './kbn_content_management_table_list_view_common.devdocs.json';
diff --git a/api_docs/kbn_content_management_table_list_view_table.mdx b/api_docs/kbn_content_management_table_list_view_table.mdx
index 991c0cb876ed..5e35942593b6 100644
--- a/api_docs/kbn_content_management_table_list_view_table.mdx
+++ b/api_docs/kbn_content_management_table_list_view_table.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-content-management-table-list-view-table
title: "@kbn/content-management-table-list-view-table"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/content-management-table-list-view-table plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/content-management-table-list-view-table']
---
import kbnContentManagementTableListViewTableObj from './kbn_content_management_table_list_view_table.devdocs.json';
diff --git a/api_docs/kbn_content_management_utils.mdx b/api_docs/kbn_content_management_utils.mdx
index 8dcfe3746a64..c03b2e2b3ec7 100644
--- a/api_docs/kbn_content_management_utils.mdx
+++ b/api_docs/kbn_content_management_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-content-management-utils
title: "@kbn/content-management-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/content-management-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/content-management-utils']
---
import kbnContentManagementUtilsObj from './kbn_content_management_utils.devdocs.json';
diff --git a/api_docs/kbn_core_analytics_browser.mdx b/api_docs/kbn_core_analytics_browser.mdx
index 3cbcf73cba2b..c05663d95c35 100644
--- a/api_docs/kbn_core_analytics_browser.mdx
+++ b/api_docs/kbn_core_analytics_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-analytics-browser
title: "@kbn/core-analytics-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-analytics-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-analytics-browser']
---
import kbnCoreAnalyticsBrowserObj from './kbn_core_analytics_browser.devdocs.json';
diff --git a/api_docs/kbn_core_analytics_browser_internal.mdx b/api_docs/kbn_core_analytics_browser_internal.mdx
index 58b656c99b7a..88c5701783f5 100644
--- a/api_docs/kbn_core_analytics_browser_internal.mdx
+++ b/api_docs/kbn_core_analytics_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-analytics-browser-internal
title: "@kbn/core-analytics-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-analytics-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-analytics-browser-internal']
---
import kbnCoreAnalyticsBrowserInternalObj from './kbn_core_analytics_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_analytics_browser_mocks.mdx b/api_docs/kbn_core_analytics_browser_mocks.mdx
index b6556b1143e5..88b47eaf7c2f 100644
--- a/api_docs/kbn_core_analytics_browser_mocks.mdx
+++ b/api_docs/kbn_core_analytics_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-analytics-browser-mocks
title: "@kbn/core-analytics-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-analytics-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-analytics-browser-mocks']
---
import kbnCoreAnalyticsBrowserMocksObj from './kbn_core_analytics_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_analytics_server.mdx b/api_docs/kbn_core_analytics_server.mdx
index 530f3ab35921..4096ffadd463 100644
--- a/api_docs/kbn_core_analytics_server.mdx
+++ b/api_docs/kbn_core_analytics_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-analytics-server
title: "@kbn/core-analytics-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-analytics-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-analytics-server']
---
import kbnCoreAnalyticsServerObj from './kbn_core_analytics_server.devdocs.json';
diff --git a/api_docs/kbn_core_analytics_server_internal.mdx b/api_docs/kbn_core_analytics_server_internal.mdx
index 7d3fa9417d7b..0599d00c9281 100644
--- a/api_docs/kbn_core_analytics_server_internal.mdx
+++ b/api_docs/kbn_core_analytics_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-analytics-server-internal
title: "@kbn/core-analytics-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-analytics-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-analytics-server-internal']
---
import kbnCoreAnalyticsServerInternalObj from './kbn_core_analytics_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_analytics_server_mocks.mdx b/api_docs/kbn_core_analytics_server_mocks.mdx
index 481d56f376ac..df34fdebc93d 100644
--- a/api_docs/kbn_core_analytics_server_mocks.mdx
+++ b/api_docs/kbn_core_analytics_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-analytics-server-mocks
title: "@kbn/core-analytics-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-analytics-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-analytics-server-mocks']
---
import kbnCoreAnalyticsServerMocksObj from './kbn_core_analytics_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_application_browser.mdx b/api_docs/kbn_core_application_browser.mdx
index 4553e62b57d0..30182e40d1e4 100644
--- a/api_docs/kbn_core_application_browser.mdx
+++ b/api_docs/kbn_core_application_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-application-browser
title: "@kbn/core-application-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-application-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-application-browser']
---
import kbnCoreApplicationBrowserObj from './kbn_core_application_browser.devdocs.json';
diff --git a/api_docs/kbn_core_application_browser_internal.mdx b/api_docs/kbn_core_application_browser_internal.mdx
index 214921c06010..07ec4b5f0cec 100644
--- a/api_docs/kbn_core_application_browser_internal.mdx
+++ b/api_docs/kbn_core_application_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-application-browser-internal
title: "@kbn/core-application-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-application-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-application-browser-internal']
---
import kbnCoreApplicationBrowserInternalObj from './kbn_core_application_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_application_browser_mocks.mdx b/api_docs/kbn_core_application_browser_mocks.mdx
index d50056f1666e..d1632f501cd9 100644
--- a/api_docs/kbn_core_application_browser_mocks.mdx
+++ b/api_docs/kbn_core_application_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-application-browser-mocks
title: "@kbn/core-application-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-application-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-application-browser-mocks']
---
import kbnCoreApplicationBrowserMocksObj from './kbn_core_application_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_application_common.mdx b/api_docs/kbn_core_application_common.mdx
index 99c37469597e..787669bc994c 100644
--- a/api_docs/kbn_core_application_common.mdx
+++ b/api_docs/kbn_core_application_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-application-common
title: "@kbn/core-application-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-application-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-application-common']
---
import kbnCoreApplicationCommonObj from './kbn_core_application_common.devdocs.json';
diff --git a/api_docs/kbn_core_apps_browser_internal.mdx b/api_docs/kbn_core_apps_browser_internal.mdx
index b565b7424bf1..feea283f3f46 100644
--- a/api_docs/kbn_core_apps_browser_internal.mdx
+++ b/api_docs/kbn_core_apps_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-apps-browser-internal
title: "@kbn/core-apps-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-apps-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-apps-browser-internal']
---
import kbnCoreAppsBrowserInternalObj from './kbn_core_apps_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_apps_browser_mocks.mdx b/api_docs/kbn_core_apps_browser_mocks.mdx
index d4d5adcfc7f8..9d31bccb6171 100644
--- a/api_docs/kbn_core_apps_browser_mocks.mdx
+++ b/api_docs/kbn_core_apps_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-apps-browser-mocks
title: "@kbn/core-apps-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-apps-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-apps-browser-mocks']
---
import kbnCoreAppsBrowserMocksObj from './kbn_core_apps_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_apps_server_internal.mdx b/api_docs/kbn_core_apps_server_internal.mdx
index 9d821d4c5322..8f49430dc6eb 100644
--- a/api_docs/kbn_core_apps_server_internal.mdx
+++ b/api_docs/kbn_core_apps_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-apps-server-internal
title: "@kbn/core-apps-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-apps-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-apps-server-internal']
---
import kbnCoreAppsServerInternalObj from './kbn_core_apps_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_base_browser_mocks.mdx b/api_docs/kbn_core_base_browser_mocks.mdx
index 497ba8cd2714..0aed2c4bbd40 100644
--- a/api_docs/kbn_core_base_browser_mocks.mdx
+++ b/api_docs/kbn_core_base_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-base-browser-mocks
title: "@kbn/core-base-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-base-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-base-browser-mocks']
---
import kbnCoreBaseBrowserMocksObj from './kbn_core_base_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_base_common.mdx b/api_docs/kbn_core_base_common.mdx
index 4a807d537475..8e0f84ff0f54 100644
--- a/api_docs/kbn_core_base_common.mdx
+++ b/api_docs/kbn_core_base_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-base-common
title: "@kbn/core-base-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-base-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-base-common']
---
import kbnCoreBaseCommonObj from './kbn_core_base_common.devdocs.json';
diff --git a/api_docs/kbn_core_base_server_internal.mdx b/api_docs/kbn_core_base_server_internal.mdx
index 8effbf2622aa..1db4527ac2ec 100644
--- a/api_docs/kbn_core_base_server_internal.mdx
+++ b/api_docs/kbn_core_base_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-base-server-internal
title: "@kbn/core-base-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-base-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-base-server-internal']
---
import kbnCoreBaseServerInternalObj from './kbn_core_base_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_base_server_mocks.mdx b/api_docs/kbn_core_base_server_mocks.mdx
index c9f9d0cbe7fd..afcca28aec08 100644
--- a/api_docs/kbn_core_base_server_mocks.mdx
+++ b/api_docs/kbn_core_base_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-base-server-mocks
title: "@kbn/core-base-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-base-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-base-server-mocks']
---
import kbnCoreBaseServerMocksObj from './kbn_core_base_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_capabilities_browser_mocks.mdx b/api_docs/kbn_core_capabilities_browser_mocks.mdx
index 93013acb0b7b..971e45c7f700 100644
--- a/api_docs/kbn_core_capabilities_browser_mocks.mdx
+++ b/api_docs/kbn_core_capabilities_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-capabilities-browser-mocks
title: "@kbn/core-capabilities-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-capabilities-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-capabilities-browser-mocks']
---
import kbnCoreCapabilitiesBrowserMocksObj from './kbn_core_capabilities_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_capabilities_common.mdx b/api_docs/kbn_core_capabilities_common.mdx
index 73578f22a0da..534df8cc5d2a 100644
--- a/api_docs/kbn_core_capabilities_common.mdx
+++ b/api_docs/kbn_core_capabilities_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-capabilities-common
title: "@kbn/core-capabilities-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-capabilities-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-capabilities-common']
---
import kbnCoreCapabilitiesCommonObj from './kbn_core_capabilities_common.devdocs.json';
diff --git a/api_docs/kbn_core_capabilities_server.mdx b/api_docs/kbn_core_capabilities_server.mdx
index f6d0f0055337..d1c7c6221904 100644
--- a/api_docs/kbn_core_capabilities_server.mdx
+++ b/api_docs/kbn_core_capabilities_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-capabilities-server
title: "@kbn/core-capabilities-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-capabilities-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-capabilities-server']
---
import kbnCoreCapabilitiesServerObj from './kbn_core_capabilities_server.devdocs.json';
diff --git a/api_docs/kbn_core_capabilities_server_mocks.mdx b/api_docs/kbn_core_capabilities_server_mocks.mdx
index 8f7918ae3a88..22af86b282e1 100644
--- a/api_docs/kbn_core_capabilities_server_mocks.mdx
+++ b/api_docs/kbn_core_capabilities_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-capabilities-server-mocks
title: "@kbn/core-capabilities-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-capabilities-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-capabilities-server-mocks']
---
import kbnCoreCapabilitiesServerMocksObj from './kbn_core_capabilities_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_chrome_browser.mdx b/api_docs/kbn_core_chrome_browser.mdx
index 9a70acdfc6aa..26a83e2ba283 100644
--- a/api_docs/kbn_core_chrome_browser.mdx
+++ b/api_docs/kbn_core_chrome_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-chrome-browser
title: "@kbn/core-chrome-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-chrome-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-chrome-browser']
---
import kbnCoreChromeBrowserObj from './kbn_core_chrome_browser.devdocs.json';
diff --git a/api_docs/kbn_core_chrome_browser_mocks.mdx b/api_docs/kbn_core_chrome_browser_mocks.mdx
index e79fc2bcb31a..e2c97dbcd707 100644
--- a/api_docs/kbn_core_chrome_browser_mocks.mdx
+++ b/api_docs/kbn_core_chrome_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-chrome-browser-mocks
title: "@kbn/core-chrome-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-chrome-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-chrome-browser-mocks']
---
import kbnCoreChromeBrowserMocksObj from './kbn_core_chrome_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_config_server_internal.mdx b/api_docs/kbn_core_config_server_internal.mdx
index 1ed9cd4142af..2084ce9ef99f 100644
--- a/api_docs/kbn_core_config_server_internal.mdx
+++ b/api_docs/kbn_core_config_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-config-server-internal
title: "@kbn/core-config-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-config-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-config-server-internal']
---
import kbnCoreConfigServerInternalObj from './kbn_core_config_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_browser.mdx b/api_docs/kbn_core_custom_branding_browser.mdx
index ded50dd06822..abbe4def95de 100644
--- a/api_docs/kbn_core_custom_branding_browser.mdx
+++ b/api_docs/kbn_core_custom_branding_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-browser
title: "@kbn/core-custom-branding-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-browser']
---
import kbnCoreCustomBrandingBrowserObj from './kbn_core_custom_branding_browser.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_browser_internal.mdx b/api_docs/kbn_core_custom_branding_browser_internal.mdx
index e3859d644ff3..eec883a56b67 100644
--- a/api_docs/kbn_core_custom_branding_browser_internal.mdx
+++ b/api_docs/kbn_core_custom_branding_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-browser-internal
title: "@kbn/core-custom-branding-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-browser-internal']
---
import kbnCoreCustomBrandingBrowserInternalObj from './kbn_core_custom_branding_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_browser_mocks.mdx b/api_docs/kbn_core_custom_branding_browser_mocks.mdx
index a2806d664d3a..9daa641b47ab 100644
--- a/api_docs/kbn_core_custom_branding_browser_mocks.mdx
+++ b/api_docs/kbn_core_custom_branding_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-browser-mocks
title: "@kbn/core-custom-branding-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-browser-mocks']
---
import kbnCoreCustomBrandingBrowserMocksObj from './kbn_core_custom_branding_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_common.mdx b/api_docs/kbn_core_custom_branding_common.mdx
index f5643ba047f5..b890d7b3453e 100644
--- a/api_docs/kbn_core_custom_branding_common.mdx
+++ b/api_docs/kbn_core_custom_branding_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-common
title: "@kbn/core-custom-branding-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-common']
---
import kbnCoreCustomBrandingCommonObj from './kbn_core_custom_branding_common.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_server.mdx b/api_docs/kbn_core_custom_branding_server.mdx
index 200ce37bbb9f..9f803e3ff39b 100644
--- a/api_docs/kbn_core_custom_branding_server.mdx
+++ b/api_docs/kbn_core_custom_branding_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-server
title: "@kbn/core-custom-branding-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-server']
---
import kbnCoreCustomBrandingServerObj from './kbn_core_custom_branding_server.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_server_internal.mdx b/api_docs/kbn_core_custom_branding_server_internal.mdx
index 6e8348e401b5..e5b9567a5832 100644
--- a/api_docs/kbn_core_custom_branding_server_internal.mdx
+++ b/api_docs/kbn_core_custom_branding_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-server-internal
title: "@kbn/core-custom-branding-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-server-internal']
---
import kbnCoreCustomBrandingServerInternalObj from './kbn_core_custom_branding_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_custom_branding_server_mocks.mdx b/api_docs/kbn_core_custom_branding_server_mocks.mdx
index 2ef04f5cfa8a..9fb5b73adb8e 100644
--- a/api_docs/kbn_core_custom_branding_server_mocks.mdx
+++ b/api_docs/kbn_core_custom_branding_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-custom-branding-server-mocks
title: "@kbn/core-custom-branding-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-custom-branding-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-custom-branding-server-mocks']
---
import kbnCoreCustomBrandingServerMocksObj from './kbn_core_custom_branding_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_browser.mdx b/api_docs/kbn_core_deprecations_browser.mdx
index a1b65ec2afcb..877c35a76d06 100644
--- a/api_docs/kbn_core_deprecations_browser.mdx
+++ b/api_docs/kbn_core_deprecations_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-browser
title: "@kbn/core-deprecations-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-browser']
---
import kbnCoreDeprecationsBrowserObj from './kbn_core_deprecations_browser.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_browser_internal.mdx b/api_docs/kbn_core_deprecations_browser_internal.mdx
index f39ede03db41..021089df5192 100644
--- a/api_docs/kbn_core_deprecations_browser_internal.mdx
+++ b/api_docs/kbn_core_deprecations_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-browser-internal
title: "@kbn/core-deprecations-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-browser-internal']
---
import kbnCoreDeprecationsBrowserInternalObj from './kbn_core_deprecations_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_browser_mocks.mdx b/api_docs/kbn_core_deprecations_browser_mocks.mdx
index ed56ea28337b..f920b172a8dc 100644
--- a/api_docs/kbn_core_deprecations_browser_mocks.mdx
+++ b/api_docs/kbn_core_deprecations_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-browser-mocks
title: "@kbn/core-deprecations-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-browser-mocks']
---
import kbnCoreDeprecationsBrowserMocksObj from './kbn_core_deprecations_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_common.mdx b/api_docs/kbn_core_deprecations_common.mdx
index 88aa2efa567e..4f2d6dc9a911 100644
--- a/api_docs/kbn_core_deprecations_common.mdx
+++ b/api_docs/kbn_core_deprecations_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-common
title: "@kbn/core-deprecations-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-common']
---
import kbnCoreDeprecationsCommonObj from './kbn_core_deprecations_common.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_server.mdx b/api_docs/kbn_core_deprecations_server.mdx
index 51efba5093ba..c65a728bc1b2 100644
--- a/api_docs/kbn_core_deprecations_server.mdx
+++ b/api_docs/kbn_core_deprecations_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-server
title: "@kbn/core-deprecations-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-server']
---
import kbnCoreDeprecationsServerObj from './kbn_core_deprecations_server.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_server_internal.mdx b/api_docs/kbn_core_deprecations_server_internal.mdx
index 76dc6da3955e..a5889862b4ae 100644
--- a/api_docs/kbn_core_deprecations_server_internal.mdx
+++ b/api_docs/kbn_core_deprecations_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-server-internal
title: "@kbn/core-deprecations-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-server-internal']
---
import kbnCoreDeprecationsServerInternalObj from './kbn_core_deprecations_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_deprecations_server_mocks.mdx b/api_docs/kbn_core_deprecations_server_mocks.mdx
index 0f3b6337b1a3..b4cb9e1bc0d4 100644
--- a/api_docs/kbn_core_deprecations_server_mocks.mdx
+++ b/api_docs/kbn_core_deprecations_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-deprecations-server-mocks
title: "@kbn/core-deprecations-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-deprecations-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-deprecations-server-mocks']
---
import kbnCoreDeprecationsServerMocksObj from './kbn_core_deprecations_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_doc_links_browser.mdx b/api_docs/kbn_core_doc_links_browser.mdx
index 725614f160a9..3c6970f3e9b6 100644
--- a/api_docs/kbn_core_doc_links_browser.mdx
+++ b/api_docs/kbn_core_doc_links_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-doc-links-browser
title: "@kbn/core-doc-links-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-doc-links-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-doc-links-browser']
---
import kbnCoreDocLinksBrowserObj from './kbn_core_doc_links_browser.devdocs.json';
diff --git a/api_docs/kbn_core_doc_links_browser_mocks.mdx b/api_docs/kbn_core_doc_links_browser_mocks.mdx
index 2eb3abdce8d9..21af2868e7b6 100644
--- a/api_docs/kbn_core_doc_links_browser_mocks.mdx
+++ b/api_docs/kbn_core_doc_links_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-doc-links-browser-mocks
title: "@kbn/core-doc-links-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-doc-links-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-doc-links-browser-mocks']
---
import kbnCoreDocLinksBrowserMocksObj from './kbn_core_doc_links_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_doc_links_server.mdx b/api_docs/kbn_core_doc_links_server.mdx
index 9b864cf0d84b..3d5a8478b759 100644
--- a/api_docs/kbn_core_doc_links_server.mdx
+++ b/api_docs/kbn_core_doc_links_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-doc-links-server
title: "@kbn/core-doc-links-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-doc-links-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-doc-links-server']
---
import kbnCoreDocLinksServerObj from './kbn_core_doc_links_server.devdocs.json';
diff --git a/api_docs/kbn_core_doc_links_server_mocks.mdx b/api_docs/kbn_core_doc_links_server_mocks.mdx
index 3614096ed5c3..227a5590c06b 100644
--- a/api_docs/kbn_core_doc_links_server_mocks.mdx
+++ b/api_docs/kbn_core_doc_links_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-doc-links-server-mocks
title: "@kbn/core-doc-links-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-doc-links-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-doc-links-server-mocks']
---
import kbnCoreDocLinksServerMocksObj from './kbn_core_doc_links_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_elasticsearch_client_server_internal.mdx b/api_docs/kbn_core_elasticsearch_client_server_internal.mdx
index d63e5fe32ac1..dee7dd94857b 100644
--- a/api_docs/kbn_core_elasticsearch_client_server_internal.mdx
+++ b/api_docs/kbn_core_elasticsearch_client_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-elasticsearch-client-server-internal
title: "@kbn/core-elasticsearch-client-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-elasticsearch-client-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-elasticsearch-client-server-internal']
---
import kbnCoreElasticsearchClientServerInternalObj from './kbn_core_elasticsearch_client_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_elasticsearch_client_server_mocks.mdx b/api_docs/kbn_core_elasticsearch_client_server_mocks.mdx
index 6817fa236ac9..ba88dab426b0 100644
--- a/api_docs/kbn_core_elasticsearch_client_server_mocks.mdx
+++ b/api_docs/kbn_core_elasticsearch_client_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-elasticsearch-client-server-mocks
title: "@kbn/core-elasticsearch-client-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-elasticsearch-client-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-elasticsearch-client-server-mocks']
---
import kbnCoreElasticsearchClientServerMocksObj from './kbn_core_elasticsearch_client_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_elasticsearch_server.mdx b/api_docs/kbn_core_elasticsearch_server.mdx
index 771760d17c37..27ddb2ec469a 100644
--- a/api_docs/kbn_core_elasticsearch_server.mdx
+++ b/api_docs/kbn_core_elasticsearch_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-elasticsearch-server
title: "@kbn/core-elasticsearch-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-elasticsearch-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-elasticsearch-server']
---
import kbnCoreElasticsearchServerObj from './kbn_core_elasticsearch_server.devdocs.json';
diff --git a/api_docs/kbn_core_elasticsearch_server_internal.mdx b/api_docs/kbn_core_elasticsearch_server_internal.mdx
index a0c4bf948966..9d8104fbb8f7 100644
--- a/api_docs/kbn_core_elasticsearch_server_internal.mdx
+++ b/api_docs/kbn_core_elasticsearch_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-elasticsearch-server-internal
title: "@kbn/core-elasticsearch-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-elasticsearch-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-elasticsearch-server-internal']
---
import kbnCoreElasticsearchServerInternalObj from './kbn_core_elasticsearch_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_elasticsearch_server_mocks.mdx b/api_docs/kbn_core_elasticsearch_server_mocks.mdx
index 275bbcebbd68..3e61cef89208 100644
--- a/api_docs/kbn_core_elasticsearch_server_mocks.mdx
+++ b/api_docs/kbn_core_elasticsearch_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-elasticsearch-server-mocks
title: "@kbn/core-elasticsearch-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-elasticsearch-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-elasticsearch-server-mocks']
---
import kbnCoreElasticsearchServerMocksObj from './kbn_core_elasticsearch_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_environment_server_internal.mdx b/api_docs/kbn_core_environment_server_internal.mdx
index 348816a19392..58b4180d806a 100644
--- a/api_docs/kbn_core_environment_server_internal.mdx
+++ b/api_docs/kbn_core_environment_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-environment-server-internal
title: "@kbn/core-environment-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-environment-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-environment-server-internal']
---
import kbnCoreEnvironmentServerInternalObj from './kbn_core_environment_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_environment_server_mocks.mdx b/api_docs/kbn_core_environment_server_mocks.mdx
index b07969f88cae..634490b7ae64 100644
--- a/api_docs/kbn_core_environment_server_mocks.mdx
+++ b/api_docs/kbn_core_environment_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-environment-server-mocks
title: "@kbn/core-environment-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-environment-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-environment-server-mocks']
---
import kbnCoreEnvironmentServerMocksObj from './kbn_core_environment_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_browser.mdx b/api_docs/kbn_core_execution_context_browser.mdx
index 87ad6152648e..323fbbe1db1f 100644
--- a/api_docs/kbn_core_execution_context_browser.mdx
+++ b/api_docs/kbn_core_execution_context_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-browser
title: "@kbn/core-execution-context-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-browser']
---
import kbnCoreExecutionContextBrowserObj from './kbn_core_execution_context_browser.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_browser_internal.mdx b/api_docs/kbn_core_execution_context_browser_internal.mdx
index 243b62f31b76..4b6b13ab9e97 100644
--- a/api_docs/kbn_core_execution_context_browser_internal.mdx
+++ b/api_docs/kbn_core_execution_context_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-browser-internal
title: "@kbn/core-execution-context-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-browser-internal']
---
import kbnCoreExecutionContextBrowserInternalObj from './kbn_core_execution_context_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_browser_mocks.mdx b/api_docs/kbn_core_execution_context_browser_mocks.mdx
index 9e2b83e4b9b4..17af420cfb90 100644
--- a/api_docs/kbn_core_execution_context_browser_mocks.mdx
+++ b/api_docs/kbn_core_execution_context_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-browser-mocks
title: "@kbn/core-execution-context-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-browser-mocks']
---
import kbnCoreExecutionContextBrowserMocksObj from './kbn_core_execution_context_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_common.mdx b/api_docs/kbn_core_execution_context_common.mdx
index 79d197ecca0d..0b54e0e4e172 100644
--- a/api_docs/kbn_core_execution_context_common.mdx
+++ b/api_docs/kbn_core_execution_context_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-common
title: "@kbn/core-execution-context-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-common']
---
import kbnCoreExecutionContextCommonObj from './kbn_core_execution_context_common.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_server.mdx b/api_docs/kbn_core_execution_context_server.mdx
index b0a6ffe0c7f6..194281762e7b 100644
--- a/api_docs/kbn_core_execution_context_server.mdx
+++ b/api_docs/kbn_core_execution_context_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-server
title: "@kbn/core-execution-context-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-server']
---
import kbnCoreExecutionContextServerObj from './kbn_core_execution_context_server.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_server_internal.mdx b/api_docs/kbn_core_execution_context_server_internal.mdx
index f3aecaa58fba..0407c22546f8 100644
--- a/api_docs/kbn_core_execution_context_server_internal.mdx
+++ b/api_docs/kbn_core_execution_context_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-server-internal
title: "@kbn/core-execution-context-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-server-internal']
---
import kbnCoreExecutionContextServerInternalObj from './kbn_core_execution_context_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_execution_context_server_mocks.mdx b/api_docs/kbn_core_execution_context_server_mocks.mdx
index 36fbbb1b5ab3..6dc145642386 100644
--- a/api_docs/kbn_core_execution_context_server_mocks.mdx
+++ b/api_docs/kbn_core_execution_context_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-execution-context-server-mocks
title: "@kbn/core-execution-context-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-execution-context-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-execution-context-server-mocks']
---
import kbnCoreExecutionContextServerMocksObj from './kbn_core_execution_context_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_fatal_errors_browser.mdx b/api_docs/kbn_core_fatal_errors_browser.mdx
index 2906ca14bbca..3aa814292990 100644
--- a/api_docs/kbn_core_fatal_errors_browser.mdx
+++ b/api_docs/kbn_core_fatal_errors_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-fatal-errors-browser
title: "@kbn/core-fatal-errors-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-fatal-errors-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-fatal-errors-browser']
---
import kbnCoreFatalErrorsBrowserObj from './kbn_core_fatal_errors_browser.devdocs.json';
diff --git a/api_docs/kbn_core_fatal_errors_browser_mocks.mdx b/api_docs/kbn_core_fatal_errors_browser_mocks.mdx
index adfd1cc54442..98db8a177e10 100644
--- a/api_docs/kbn_core_fatal_errors_browser_mocks.mdx
+++ b/api_docs/kbn_core_fatal_errors_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-fatal-errors-browser-mocks
title: "@kbn/core-fatal-errors-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-fatal-errors-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-fatal-errors-browser-mocks']
---
import kbnCoreFatalErrorsBrowserMocksObj from './kbn_core_fatal_errors_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_http_browser.mdx b/api_docs/kbn_core_http_browser.mdx
index ada1c429f93f..d251b4ebba44 100644
--- a/api_docs/kbn_core_http_browser.mdx
+++ b/api_docs/kbn_core_http_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-browser
title: "@kbn/core-http-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-browser']
---
import kbnCoreHttpBrowserObj from './kbn_core_http_browser.devdocs.json';
diff --git a/api_docs/kbn_core_http_browser_internal.mdx b/api_docs/kbn_core_http_browser_internal.mdx
index 11caaad85873..12cc68f10943 100644
--- a/api_docs/kbn_core_http_browser_internal.mdx
+++ b/api_docs/kbn_core_http_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-browser-internal
title: "@kbn/core-http-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-browser-internal']
---
import kbnCoreHttpBrowserInternalObj from './kbn_core_http_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_http_browser_mocks.mdx b/api_docs/kbn_core_http_browser_mocks.mdx
index 38d8d0400ca4..c9615ea27f5b 100644
--- a/api_docs/kbn_core_http_browser_mocks.mdx
+++ b/api_docs/kbn_core_http_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-browser-mocks
title: "@kbn/core-http-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-browser-mocks']
---
import kbnCoreHttpBrowserMocksObj from './kbn_core_http_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_http_common.mdx b/api_docs/kbn_core_http_common.mdx
index 2a034b8fa8e0..94f64e5ff504 100644
--- a/api_docs/kbn_core_http_common.mdx
+++ b/api_docs/kbn_core_http_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-common
title: "@kbn/core-http-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-common']
---
import kbnCoreHttpCommonObj from './kbn_core_http_common.devdocs.json';
diff --git a/api_docs/kbn_core_http_context_server_mocks.mdx b/api_docs/kbn_core_http_context_server_mocks.mdx
index c705649d421e..3b2560d3b7d5 100644
--- a/api_docs/kbn_core_http_context_server_mocks.mdx
+++ b/api_docs/kbn_core_http_context_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-context-server-mocks
title: "@kbn/core-http-context-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-context-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-context-server-mocks']
---
import kbnCoreHttpContextServerMocksObj from './kbn_core_http_context_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_http_request_handler_context_server.mdx b/api_docs/kbn_core_http_request_handler_context_server.mdx
index 83d27f8a936f..3b6e82690727 100644
--- a/api_docs/kbn_core_http_request_handler_context_server.mdx
+++ b/api_docs/kbn_core_http_request_handler_context_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-request-handler-context-server
title: "@kbn/core-http-request-handler-context-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-request-handler-context-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-request-handler-context-server']
---
import kbnCoreHttpRequestHandlerContextServerObj from './kbn_core_http_request_handler_context_server.devdocs.json';
diff --git a/api_docs/kbn_core_http_resources_server.mdx b/api_docs/kbn_core_http_resources_server.mdx
index 6dfa4b4bdab3..d8638f48d5a5 100644
--- a/api_docs/kbn_core_http_resources_server.mdx
+++ b/api_docs/kbn_core_http_resources_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-resources-server
title: "@kbn/core-http-resources-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-resources-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-resources-server']
---
import kbnCoreHttpResourcesServerObj from './kbn_core_http_resources_server.devdocs.json';
diff --git a/api_docs/kbn_core_http_resources_server_internal.mdx b/api_docs/kbn_core_http_resources_server_internal.mdx
index 87f781fe4276..024cf5323dbf 100644
--- a/api_docs/kbn_core_http_resources_server_internal.mdx
+++ b/api_docs/kbn_core_http_resources_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-resources-server-internal
title: "@kbn/core-http-resources-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-resources-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-resources-server-internal']
---
import kbnCoreHttpResourcesServerInternalObj from './kbn_core_http_resources_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_http_resources_server_mocks.mdx b/api_docs/kbn_core_http_resources_server_mocks.mdx
index 2ea401636c55..3f8238d20dd8 100644
--- a/api_docs/kbn_core_http_resources_server_mocks.mdx
+++ b/api_docs/kbn_core_http_resources_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-resources-server-mocks
title: "@kbn/core-http-resources-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-resources-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-resources-server-mocks']
---
import kbnCoreHttpResourcesServerMocksObj from './kbn_core_http_resources_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_http_router_server_internal.mdx b/api_docs/kbn_core_http_router_server_internal.mdx
index dbd05efe624b..a75398779646 100644
--- a/api_docs/kbn_core_http_router_server_internal.mdx
+++ b/api_docs/kbn_core_http_router_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-router-server-internal
title: "@kbn/core-http-router-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-router-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-router-server-internal']
---
import kbnCoreHttpRouterServerInternalObj from './kbn_core_http_router_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_http_router_server_mocks.mdx b/api_docs/kbn_core_http_router_server_mocks.mdx
index e18e45f0981f..66a2fe0f3268 100644
--- a/api_docs/kbn_core_http_router_server_mocks.mdx
+++ b/api_docs/kbn_core_http_router_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-router-server-mocks
title: "@kbn/core-http-router-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-router-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-router-server-mocks']
---
import kbnCoreHttpRouterServerMocksObj from './kbn_core_http_router_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_http_server.devdocs.json b/api_docs/kbn_core_http_server.devdocs.json
index 51589224da08..c0e574bab89e 100644
--- a/api_docs/kbn_core_http_server.devdocs.json
+++ b/api_docs/kbn_core_http_server.devdocs.json
@@ -3348,22 +3348,6 @@
"plugin": "@kbn/core-apps-server-internal",
"path": "packages/core/apps/core-apps-server-internal/src/core_app.ts"
},
- {
- "plugin": "usageCollection",
- "path": "src/plugins/usage_collection/server/routes/stats/stats.ts"
- },
- {
- "plugin": "taskManager",
- "path": "x-pack/plugins/task_manager/server/routes/health.ts"
- },
- {
- "plugin": "taskManager",
- "path": "x-pack/plugins/task_manager/server/routes/background_task_utilization.ts"
- },
- {
- "plugin": "taskManager",
- "path": "x-pack/plugins/task_manager/server/routes/metrics.ts"
- },
{
"plugin": "licensing",
"path": "x-pack/plugins/licensing/server/routes/info.ts"
@@ -3376,6 +3360,10 @@
"plugin": "features",
"path": "x-pack/plugins/features/server/routes/index.ts"
},
+ {
+ "plugin": "usageCollection",
+ "path": "src/plugins/usage_collection/server/routes/stats/stats.ts"
+ },
{
"plugin": "customIntegrations",
"path": "src/plugins/custom_integrations/server/routes/define_routes.ts"
@@ -3404,6 +3392,18 @@
"plugin": "spaces",
"path": "x-pack/plugins/spaces/server/routes/api/internal/get_active_space.ts"
},
+ {
+ "plugin": "taskManager",
+ "path": "x-pack/plugins/task_manager/server/routes/health.ts"
+ },
+ {
+ "plugin": "taskManager",
+ "path": "x-pack/plugins/task_manager/server/routes/background_task_utilization.ts"
+ },
+ {
+ "plugin": "taskManager",
+ "path": "x-pack/plugins/task_manager/server/routes/metrics.ts"
+ },
{
"plugin": "security",
"path": "x-pack/plugins/security/server/routes/api_keys/enabled.ts"
@@ -5910,10 +5910,6 @@
"plugin": "@kbn/core-capabilities-server-internal",
"path": "packages/core/capabilities/core-capabilities-server-internal/src/routes/resolve_capabilities.ts"
},
- {
- "plugin": "usageCollection",
- "path": "src/plugins/usage_collection/server/routes/ui_counters.ts"
- },
{
"plugin": "licensing",
"path": "x-pack/plugins/licensing/server/routes/internal/notify_feature_usage.ts"
@@ -5922,6 +5918,10 @@
"plugin": "licensing",
"path": "x-pack/plugins/licensing/server/routes/internal/register_feature.ts"
},
+ {
+ "plugin": "usageCollection",
+ "path": "src/plugins/usage_collection/server/routes/ui_counters.ts"
+ },
{
"plugin": "home",
"path": "src/plugins/home/server/services/sample_data/routes/install.ts"
diff --git a/api_docs/kbn_core_http_server.mdx b/api_docs/kbn_core_http_server.mdx
index 12ad57b21e2e..80581fc2dc82 100644
--- a/api_docs/kbn_core_http_server.mdx
+++ b/api_docs/kbn_core_http_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-server
title: "@kbn/core-http-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-server']
---
import kbnCoreHttpServerObj from './kbn_core_http_server.devdocs.json';
diff --git a/api_docs/kbn_core_http_server_internal.mdx b/api_docs/kbn_core_http_server_internal.mdx
index 327b5c15e913..b65fefdce307 100644
--- a/api_docs/kbn_core_http_server_internal.mdx
+++ b/api_docs/kbn_core_http_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-server-internal
title: "@kbn/core-http-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-server-internal']
---
import kbnCoreHttpServerInternalObj from './kbn_core_http_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_http_server_mocks.mdx b/api_docs/kbn_core_http_server_mocks.mdx
index 291987fdfdfe..b5ca15878216 100644
--- a/api_docs/kbn_core_http_server_mocks.mdx
+++ b/api_docs/kbn_core_http_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-http-server-mocks
title: "@kbn/core-http-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-http-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-http-server-mocks']
---
import kbnCoreHttpServerMocksObj from './kbn_core_http_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_i18n_browser.mdx b/api_docs/kbn_core_i18n_browser.mdx
index c80a0fb5312b..e1cd234b7bdd 100644
--- a/api_docs/kbn_core_i18n_browser.mdx
+++ b/api_docs/kbn_core_i18n_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-i18n-browser
title: "@kbn/core-i18n-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-i18n-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-i18n-browser']
---
import kbnCoreI18nBrowserObj from './kbn_core_i18n_browser.devdocs.json';
diff --git a/api_docs/kbn_core_i18n_browser_mocks.mdx b/api_docs/kbn_core_i18n_browser_mocks.mdx
index f7816eae72fb..ab2506ae0600 100644
--- a/api_docs/kbn_core_i18n_browser_mocks.mdx
+++ b/api_docs/kbn_core_i18n_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-i18n-browser-mocks
title: "@kbn/core-i18n-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-i18n-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-i18n-browser-mocks']
---
import kbnCoreI18nBrowserMocksObj from './kbn_core_i18n_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_i18n_server.mdx b/api_docs/kbn_core_i18n_server.mdx
index 1a8a7ba6a3e7..7752e657a5b9 100644
--- a/api_docs/kbn_core_i18n_server.mdx
+++ b/api_docs/kbn_core_i18n_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-i18n-server
title: "@kbn/core-i18n-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-i18n-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-i18n-server']
---
import kbnCoreI18nServerObj from './kbn_core_i18n_server.devdocs.json';
diff --git a/api_docs/kbn_core_i18n_server_internal.mdx b/api_docs/kbn_core_i18n_server_internal.mdx
index 324911f6f6b5..87016a9a0321 100644
--- a/api_docs/kbn_core_i18n_server_internal.mdx
+++ b/api_docs/kbn_core_i18n_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-i18n-server-internal
title: "@kbn/core-i18n-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-i18n-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-i18n-server-internal']
---
import kbnCoreI18nServerInternalObj from './kbn_core_i18n_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_i18n_server_mocks.mdx b/api_docs/kbn_core_i18n_server_mocks.mdx
index a33e50b8d0f9..1253f90e42a5 100644
--- a/api_docs/kbn_core_i18n_server_mocks.mdx
+++ b/api_docs/kbn_core_i18n_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-i18n-server-mocks
title: "@kbn/core-i18n-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-i18n-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-i18n-server-mocks']
---
import kbnCoreI18nServerMocksObj from './kbn_core_i18n_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_injected_metadata_browser_mocks.mdx b/api_docs/kbn_core_injected_metadata_browser_mocks.mdx
index dccf5d439d8d..2daf625d13ec 100644
--- a/api_docs/kbn_core_injected_metadata_browser_mocks.mdx
+++ b/api_docs/kbn_core_injected_metadata_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-injected-metadata-browser-mocks
title: "@kbn/core-injected-metadata-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-injected-metadata-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-injected-metadata-browser-mocks']
---
import kbnCoreInjectedMetadataBrowserMocksObj from './kbn_core_injected_metadata_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_integrations_browser_internal.mdx b/api_docs/kbn_core_integrations_browser_internal.mdx
index 3bc18ba2b11c..01b55c2a50dc 100644
--- a/api_docs/kbn_core_integrations_browser_internal.mdx
+++ b/api_docs/kbn_core_integrations_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-integrations-browser-internal
title: "@kbn/core-integrations-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-integrations-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-integrations-browser-internal']
---
import kbnCoreIntegrationsBrowserInternalObj from './kbn_core_integrations_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_integrations_browser_mocks.mdx b/api_docs/kbn_core_integrations_browser_mocks.mdx
index 261cfcac6818..d9518628d0ec 100644
--- a/api_docs/kbn_core_integrations_browser_mocks.mdx
+++ b/api_docs/kbn_core_integrations_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-integrations-browser-mocks
title: "@kbn/core-integrations-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-integrations-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-integrations-browser-mocks']
---
import kbnCoreIntegrationsBrowserMocksObj from './kbn_core_integrations_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_lifecycle_browser.mdx b/api_docs/kbn_core_lifecycle_browser.mdx
index f7b6b3feac7f..a40c2ff34a94 100644
--- a/api_docs/kbn_core_lifecycle_browser.mdx
+++ b/api_docs/kbn_core_lifecycle_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-lifecycle-browser
title: "@kbn/core-lifecycle-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-lifecycle-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-lifecycle-browser']
---
import kbnCoreLifecycleBrowserObj from './kbn_core_lifecycle_browser.devdocs.json';
diff --git a/api_docs/kbn_core_lifecycle_browser_mocks.mdx b/api_docs/kbn_core_lifecycle_browser_mocks.mdx
index 5fee18cb6105..fe8f0369eda0 100644
--- a/api_docs/kbn_core_lifecycle_browser_mocks.mdx
+++ b/api_docs/kbn_core_lifecycle_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-lifecycle-browser-mocks
title: "@kbn/core-lifecycle-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-lifecycle-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-lifecycle-browser-mocks']
---
import kbnCoreLifecycleBrowserMocksObj from './kbn_core_lifecycle_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_lifecycle_server.mdx b/api_docs/kbn_core_lifecycle_server.mdx
index f3118d41fd10..d86516284283 100644
--- a/api_docs/kbn_core_lifecycle_server.mdx
+++ b/api_docs/kbn_core_lifecycle_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-lifecycle-server
title: "@kbn/core-lifecycle-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-lifecycle-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-lifecycle-server']
---
import kbnCoreLifecycleServerObj from './kbn_core_lifecycle_server.devdocs.json';
diff --git a/api_docs/kbn_core_lifecycle_server_mocks.mdx b/api_docs/kbn_core_lifecycle_server_mocks.mdx
index 7f101ad37043..df3bf5f7683d 100644
--- a/api_docs/kbn_core_lifecycle_server_mocks.mdx
+++ b/api_docs/kbn_core_lifecycle_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-lifecycle-server-mocks
title: "@kbn/core-lifecycle-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-lifecycle-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-lifecycle-server-mocks']
---
import kbnCoreLifecycleServerMocksObj from './kbn_core_lifecycle_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_logging_browser_mocks.mdx b/api_docs/kbn_core_logging_browser_mocks.mdx
index 3fb72b2dadec..5e0c426c549b 100644
--- a/api_docs/kbn_core_logging_browser_mocks.mdx
+++ b/api_docs/kbn_core_logging_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-logging-browser-mocks
title: "@kbn/core-logging-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-logging-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-logging-browser-mocks']
---
import kbnCoreLoggingBrowserMocksObj from './kbn_core_logging_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_logging_common_internal.mdx b/api_docs/kbn_core_logging_common_internal.mdx
index bda27a775848..24ed7de4369a 100644
--- a/api_docs/kbn_core_logging_common_internal.mdx
+++ b/api_docs/kbn_core_logging_common_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-logging-common-internal
title: "@kbn/core-logging-common-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-logging-common-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-logging-common-internal']
---
import kbnCoreLoggingCommonInternalObj from './kbn_core_logging_common_internal.devdocs.json';
diff --git a/api_docs/kbn_core_logging_server.mdx b/api_docs/kbn_core_logging_server.mdx
index 0170705f6a21..a734d70d4b74 100644
--- a/api_docs/kbn_core_logging_server.mdx
+++ b/api_docs/kbn_core_logging_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-logging-server
title: "@kbn/core-logging-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-logging-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-logging-server']
---
import kbnCoreLoggingServerObj from './kbn_core_logging_server.devdocs.json';
diff --git a/api_docs/kbn_core_logging_server_internal.mdx b/api_docs/kbn_core_logging_server_internal.mdx
index 8179a10960f9..baad12f2b5df 100644
--- a/api_docs/kbn_core_logging_server_internal.mdx
+++ b/api_docs/kbn_core_logging_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-logging-server-internal
title: "@kbn/core-logging-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-logging-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-logging-server-internal']
---
import kbnCoreLoggingServerInternalObj from './kbn_core_logging_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_logging_server_mocks.mdx b/api_docs/kbn_core_logging_server_mocks.mdx
index 98c8b412335e..593dd6719cf2 100644
--- a/api_docs/kbn_core_logging_server_mocks.mdx
+++ b/api_docs/kbn_core_logging_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-logging-server-mocks
title: "@kbn/core-logging-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-logging-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-logging-server-mocks']
---
import kbnCoreLoggingServerMocksObj from './kbn_core_logging_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_metrics_collectors_server_internal.mdx b/api_docs/kbn_core_metrics_collectors_server_internal.mdx
index 2a8245ef27dc..bc819c0518f7 100644
--- a/api_docs/kbn_core_metrics_collectors_server_internal.mdx
+++ b/api_docs/kbn_core_metrics_collectors_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-metrics-collectors-server-internal
title: "@kbn/core-metrics-collectors-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-metrics-collectors-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-metrics-collectors-server-internal']
---
import kbnCoreMetricsCollectorsServerInternalObj from './kbn_core_metrics_collectors_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_metrics_collectors_server_mocks.mdx b/api_docs/kbn_core_metrics_collectors_server_mocks.mdx
index 03d888abde3b..c6a57e5b8318 100644
--- a/api_docs/kbn_core_metrics_collectors_server_mocks.mdx
+++ b/api_docs/kbn_core_metrics_collectors_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-metrics-collectors-server-mocks
title: "@kbn/core-metrics-collectors-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-metrics-collectors-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-metrics-collectors-server-mocks']
---
import kbnCoreMetricsCollectorsServerMocksObj from './kbn_core_metrics_collectors_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_metrics_server.mdx b/api_docs/kbn_core_metrics_server.mdx
index aa0c3ccce530..e17e4921fb3a 100644
--- a/api_docs/kbn_core_metrics_server.mdx
+++ b/api_docs/kbn_core_metrics_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-metrics-server
title: "@kbn/core-metrics-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-metrics-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-metrics-server']
---
import kbnCoreMetricsServerObj from './kbn_core_metrics_server.devdocs.json';
diff --git a/api_docs/kbn_core_metrics_server_internal.mdx b/api_docs/kbn_core_metrics_server_internal.mdx
index 0725e31e8ae5..e57f57ab1db6 100644
--- a/api_docs/kbn_core_metrics_server_internal.mdx
+++ b/api_docs/kbn_core_metrics_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-metrics-server-internal
title: "@kbn/core-metrics-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-metrics-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-metrics-server-internal']
---
import kbnCoreMetricsServerInternalObj from './kbn_core_metrics_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_metrics_server_mocks.mdx b/api_docs/kbn_core_metrics_server_mocks.mdx
index fe4603463d40..d828389c70ac 100644
--- a/api_docs/kbn_core_metrics_server_mocks.mdx
+++ b/api_docs/kbn_core_metrics_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-metrics-server-mocks
title: "@kbn/core-metrics-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-metrics-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-metrics-server-mocks']
---
import kbnCoreMetricsServerMocksObj from './kbn_core_metrics_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_mount_utils_browser.mdx b/api_docs/kbn_core_mount_utils_browser.mdx
index fbf5effc8651..80aa728d2a8f 100644
--- a/api_docs/kbn_core_mount_utils_browser.mdx
+++ b/api_docs/kbn_core_mount_utils_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-mount-utils-browser
title: "@kbn/core-mount-utils-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-mount-utils-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-mount-utils-browser']
---
import kbnCoreMountUtilsBrowserObj from './kbn_core_mount_utils_browser.devdocs.json';
diff --git a/api_docs/kbn_core_node_server.mdx b/api_docs/kbn_core_node_server.mdx
index 775e5a37cfe1..0d12657e3174 100644
--- a/api_docs/kbn_core_node_server.mdx
+++ b/api_docs/kbn_core_node_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-node-server
title: "@kbn/core-node-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-node-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-node-server']
---
import kbnCoreNodeServerObj from './kbn_core_node_server.devdocs.json';
diff --git a/api_docs/kbn_core_node_server_internal.mdx b/api_docs/kbn_core_node_server_internal.mdx
index 80437c9305a7..ee64e8ce7555 100644
--- a/api_docs/kbn_core_node_server_internal.mdx
+++ b/api_docs/kbn_core_node_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-node-server-internal
title: "@kbn/core-node-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-node-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-node-server-internal']
---
import kbnCoreNodeServerInternalObj from './kbn_core_node_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_node_server_mocks.mdx b/api_docs/kbn_core_node_server_mocks.mdx
index d0d83e7c5290..92ef818832bf 100644
--- a/api_docs/kbn_core_node_server_mocks.mdx
+++ b/api_docs/kbn_core_node_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-node-server-mocks
title: "@kbn/core-node-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-node-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-node-server-mocks']
---
import kbnCoreNodeServerMocksObj from './kbn_core_node_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_notifications_browser.mdx b/api_docs/kbn_core_notifications_browser.mdx
index d1634371cd8c..d7285c6dc1db 100644
--- a/api_docs/kbn_core_notifications_browser.mdx
+++ b/api_docs/kbn_core_notifications_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-notifications-browser
title: "@kbn/core-notifications-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-notifications-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-notifications-browser']
---
import kbnCoreNotificationsBrowserObj from './kbn_core_notifications_browser.devdocs.json';
diff --git a/api_docs/kbn_core_notifications_browser_internal.mdx b/api_docs/kbn_core_notifications_browser_internal.mdx
index dba44076ad04..2279b04808f4 100644
--- a/api_docs/kbn_core_notifications_browser_internal.mdx
+++ b/api_docs/kbn_core_notifications_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-notifications-browser-internal
title: "@kbn/core-notifications-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-notifications-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-notifications-browser-internal']
---
import kbnCoreNotificationsBrowserInternalObj from './kbn_core_notifications_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_notifications_browser_mocks.mdx b/api_docs/kbn_core_notifications_browser_mocks.mdx
index 691adfcb5082..4290a35fa2e2 100644
--- a/api_docs/kbn_core_notifications_browser_mocks.mdx
+++ b/api_docs/kbn_core_notifications_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-notifications-browser-mocks
title: "@kbn/core-notifications-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-notifications-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-notifications-browser-mocks']
---
import kbnCoreNotificationsBrowserMocksObj from './kbn_core_notifications_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_overlays_browser.mdx b/api_docs/kbn_core_overlays_browser.mdx
index 7eb05f5153fd..35a25f8dd8c3 100644
--- a/api_docs/kbn_core_overlays_browser.mdx
+++ b/api_docs/kbn_core_overlays_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-overlays-browser
title: "@kbn/core-overlays-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-overlays-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-overlays-browser']
---
import kbnCoreOverlaysBrowserObj from './kbn_core_overlays_browser.devdocs.json';
diff --git a/api_docs/kbn_core_overlays_browser_internal.mdx b/api_docs/kbn_core_overlays_browser_internal.mdx
index 44bdb769e10d..530abf004c5e 100644
--- a/api_docs/kbn_core_overlays_browser_internal.mdx
+++ b/api_docs/kbn_core_overlays_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-overlays-browser-internal
title: "@kbn/core-overlays-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-overlays-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-overlays-browser-internal']
---
import kbnCoreOverlaysBrowserInternalObj from './kbn_core_overlays_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_overlays_browser_mocks.mdx b/api_docs/kbn_core_overlays_browser_mocks.mdx
index a016d48cdc9a..56faab3020f2 100644
--- a/api_docs/kbn_core_overlays_browser_mocks.mdx
+++ b/api_docs/kbn_core_overlays_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-overlays-browser-mocks
title: "@kbn/core-overlays-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-overlays-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-overlays-browser-mocks']
---
import kbnCoreOverlaysBrowserMocksObj from './kbn_core_overlays_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_plugins_browser.mdx b/api_docs/kbn_core_plugins_browser.mdx
index 66049da9c178..1841cd9c3cf8 100644
--- a/api_docs/kbn_core_plugins_browser.mdx
+++ b/api_docs/kbn_core_plugins_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-plugins-browser
title: "@kbn/core-plugins-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-plugins-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-plugins-browser']
---
import kbnCorePluginsBrowserObj from './kbn_core_plugins_browser.devdocs.json';
diff --git a/api_docs/kbn_core_plugins_browser_mocks.mdx b/api_docs/kbn_core_plugins_browser_mocks.mdx
index 37a08e9f0759..74b55fe36b31 100644
--- a/api_docs/kbn_core_plugins_browser_mocks.mdx
+++ b/api_docs/kbn_core_plugins_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-plugins-browser-mocks
title: "@kbn/core-plugins-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-plugins-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-plugins-browser-mocks']
---
import kbnCorePluginsBrowserMocksObj from './kbn_core_plugins_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_plugins_contracts_browser.mdx b/api_docs/kbn_core_plugins_contracts_browser.mdx
index a9edc72206bf..a539b34821ee 100644
--- a/api_docs/kbn_core_plugins_contracts_browser.mdx
+++ b/api_docs/kbn_core_plugins_contracts_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-plugins-contracts-browser
title: "@kbn/core-plugins-contracts-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-plugins-contracts-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-plugins-contracts-browser']
---
import kbnCorePluginsContractsBrowserObj from './kbn_core_plugins_contracts_browser.devdocs.json';
diff --git a/api_docs/kbn_core_plugins_contracts_server.mdx b/api_docs/kbn_core_plugins_contracts_server.mdx
index b3652022813d..4e80c41442a4 100644
--- a/api_docs/kbn_core_plugins_contracts_server.mdx
+++ b/api_docs/kbn_core_plugins_contracts_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-plugins-contracts-server
title: "@kbn/core-plugins-contracts-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-plugins-contracts-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-plugins-contracts-server']
---
import kbnCorePluginsContractsServerObj from './kbn_core_plugins_contracts_server.devdocs.json';
diff --git a/api_docs/kbn_core_plugins_server.mdx b/api_docs/kbn_core_plugins_server.mdx
index 2d008c1d7f5a..bb26fcf59851 100644
--- a/api_docs/kbn_core_plugins_server.mdx
+++ b/api_docs/kbn_core_plugins_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-plugins-server
title: "@kbn/core-plugins-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-plugins-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-plugins-server']
---
import kbnCorePluginsServerObj from './kbn_core_plugins_server.devdocs.json';
diff --git a/api_docs/kbn_core_plugins_server_mocks.mdx b/api_docs/kbn_core_plugins_server_mocks.mdx
index 514ec1695363..436fa49ad433 100644
--- a/api_docs/kbn_core_plugins_server_mocks.mdx
+++ b/api_docs/kbn_core_plugins_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-plugins-server-mocks
title: "@kbn/core-plugins-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-plugins-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-plugins-server-mocks']
---
import kbnCorePluginsServerMocksObj from './kbn_core_plugins_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_preboot_server.mdx b/api_docs/kbn_core_preboot_server.mdx
index 04382689ce36..6944ee590aa6 100644
--- a/api_docs/kbn_core_preboot_server.mdx
+++ b/api_docs/kbn_core_preboot_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-preboot-server
title: "@kbn/core-preboot-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-preboot-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-preboot-server']
---
import kbnCorePrebootServerObj from './kbn_core_preboot_server.devdocs.json';
diff --git a/api_docs/kbn_core_preboot_server_mocks.mdx b/api_docs/kbn_core_preboot_server_mocks.mdx
index 36464903c7ec..53ee953d68b5 100644
--- a/api_docs/kbn_core_preboot_server_mocks.mdx
+++ b/api_docs/kbn_core_preboot_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-preboot-server-mocks
title: "@kbn/core-preboot-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-preboot-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-preboot-server-mocks']
---
import kbnCorePrebootServerMocksObj from './kbn_core_preboot_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_rendering_browser_mocks.mdx b/api_docs/kbn_core_rendering_browser_mocks.mdx
index cbeaa7644531..14621f632bc0 100644
--- a/api_docs/kbn_core_rendering_browser_mocks.mdx
+++ b/api_docs/kbn_core_rendering_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-rendering-browser-mocks
title: "@kbn/core-rendering-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-rendering-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-rendering-browser-mocks']
---
import kbnCoreRenderingBrowserMocksObj from './kbn_core_rendering_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_rendering_server_internal.mdx b/api_docs/kbn_core_rendering_server_internal.mdx
index dbb6966ab532..f2f9f5151af5 100644
--- a/api_docs/kbn_core_rendering_server_internal.mdx
+++ b/api_docs/kbn_core_rendering_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-rendering-server-internal
title: "@kbn/core-rendering-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-rendering-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-rendering-server-internal']
---
import kbnCoreRenderingServerInternalObj from './kbn_core_rendering_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_rendering_server_mocks.mdx b/api_docs/kbn_core_rendering_server_mocks.mdx
index 0e488f1a2352..e3d7b8ac2863 100644
--- a/api_docs/kbn_core_rendering_server_mocks.mdx
+++ b/api_docs/kbn_core_rendering_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-rendering-server-mocks
title: "@kbn/core-rendering-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-rendering-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-rendering-server-mocks']
---
import kbnCoreRenderingServerMocksObj from './kbn_core_rendering_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_root_server_internal.mdx b/api_docs/kbn_core_root_server_internal.mdx
index d2d3a9a20dd7..54ab8b15e13c 100644
--- a/api_docs/kbn_core_root_server_internal.mdx
+++ b/api_docs/kbn_core_root_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-root-server-internal
title: "@kbn/core-root-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-root-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-root-server-internal']
---
import kbnCoreRootServerInternalObj from './kbn_core_root_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_api_browser.mdx b/api_docs/kbn_core_saved_objects_api_browser.mdx
index f48b407b212b..209453d0d6ce 100644
--- a/api_docs/kbn_core_saved_objects_api_browser.mdx
+++ b/api_docs/kbn_core_saved_objects_api_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-api-browser
title: "@kbn/core-saved-objects-api-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-api-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-api-browser']
---
import kbnCoreSavedObjectsApiBrowserObj from './kbn_core_saved_objects_api_browser.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_api_server.mdx b/api_docs/kbn_core_saved_objects_api_server.mdx
index d0a7cd7cde34..e16b05acb28b 100644
--- a/api_docs/kbn_core_saved_objects_api_server.mdx
+++ b/api_docs/kbn_core_saved_objects_api_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-api-server
title: "@kbn/core-saved-objects-api-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-api-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-api-server']
---
import kbnCoreSavedObjectsApiServerObj from './kbn_core_saved_objects_api_server.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_api_server_mocks.mdx b/api_docs/kbn_core_saved_objects_api_server_mocks.mdx
index 55eec9f9f344..fe0ce8c2b7b9 100644
--- a/api_docs/kbn_core_saved_objects_api_server_mocks.mdx
+++ b/api_docs/kbn_core_saved_objects_api_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-api-server-mocks
title: "@kbn/core-saved-objects-api-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-api-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-api-server-mocks']
---
import kbnCoreSavedObjectsApiServerMocksObj from './kbn_core_saved_objects_api_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_base_server_internal.mdx b/api_docs/kbn_core_saved_objects_base_server_internal.mdx
index 40e95f023d5d..08a8cc12d97f 100644
--- a/api_docs/kbn_core_saved_objects_base_server_internal.mdx
+++ b/api_docs/kbn_core_saved_objects_base_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-base-server-internal
title: "@kbn/core-saved-objects-base-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-base-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-base-server-internal']
---
import kbnCoreSavedObjectsBaseServerInternalObj from './kbn_core_saved_objects_base_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_base_server_mocks.mdx b/api_docs/kbn_core_saved_objects_base_server_mocks.mdx
index 4237d858e2ba..52936134a537 100644
--- a/api_docs/kbn_core_saved_objects_base_server_mocks.mdx
+++ b/api_docs/kbn_core_saved_objects_base_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-base-server-mocks
title: "@kbn/core-saved-objects-base-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-base-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-base-server-mocks']
---
import kbnCoreSavedObjectsBaseServerMocksObj from './kbn_core_saved_objects_base_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_browser.mdx b/api_docs/kbn_core_saved_objects_browser.mdx
index 0b70f8a45d73..285e3d113d3d 100644
--- a/api_docs/kbn_core_saved_objects_browser.mdx
+++ b/api_docs/kbn_core_saved_objects_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-browser
title: "@kbn/core-saved-objects-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-browser']
---
import kbnCoreSavedObjectsBrowserObj from './kbn_core_saved_objects_browser.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_browser_internal.mdx b/api_docs/kbn_core_saved_objects_browser_internal.mdx
index 71db97940c99..8a0ff33c40c7 100644
--- a/api_docs/kbn_core_saved_objects_browser_internal.mdx
+++ b/api_docs/kbn_core_saved_objects_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-browser-internal
title: "@kbn/core-saved-objects-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-browser-internal']
---
import kbnCoreSavedObjectsBrowserInternalObj from './kbn_core_saved_objects_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_browser_mocks.mdx b/api_docs/kbn_core_saved_objects_browser_mocks.mdx
index 5e6ec7a5129f..d6bda26fa410 100644
--- a/api_docs/kbn_core_saved_objects_browser_mocks.mdx
+++ b/api_docs/kbn_core_saved_objects_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-browser-mocks
title: "@kbn/core-saved-objects-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-browser-mocks']
---
import kbnCoreSavedObjectsBrowserMocksObj from './kbn_core_saved_objects_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_common.mdx b/api_docs/kbn_core_saved_objects_common.mdx
index 81dd957a609f..014602af3ad1 100644
--- a/api_docs/kbn_core_saved_objects_common.mdx
+++ b/api_docs/kbn_core_saved_objects_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-common
title: "@kbn/core-saved-objects-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-common']
---
import kbnCoreSavedObjectsCommonObj from './kbn_core_saved_objects_common.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_import_export_server_internal.mdx b/api_docs/kbn_core_saved_objects_import_export_server_internal.mdx
index 55a7fe754dfd..5f9876952d62 100644
--- a/api_docs/kbn_core_saved_objects_import_export_server_internal.mdx
+++ b/api_docs/kbn_core_saved_objects_import_export_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-import-export-server-internal
title: "@kbn/core-saved-objects-import-export-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-import-export-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-import-export-server-internal']
---
import kbnCoreSavedObjectsImportExportServerInternalObj from './kbn_core_saved_objects_import_export_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_import_export_server_mocks.mdx b/api_docs/kbn_core_saved_objects_import_export_server_mocks.mdx
index fc314207c592..2dd152cae304 100644
--- a/api_docs/kbn_core_saved_objects_import_export_server_mocks.mdx
+++ b/api_docs/kbn_core_saved_objects_import_export_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-import-export-server-mocks
title: "@kbn/core-saved-objects-import-export-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-import-export-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-import-export-server-mocks']
---
import kbnCoreSavedObjectsImportExportServerMocksObj from './kbn_core_saved_objects_import_export_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_migration_server_internal.mdx b/api_docs/kbn_core_saved_objects_migration_server_internal.mdx
index c03b9766b39d..5bd9834a186b 100644
--- a/api_docs/kbn_core_saved_objects_migration_server_internal.mdx
+++ b/api_docs/kbn_core_saved_objects_migration_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-migration-server-internal
title: "@kbn/core-saved-objects-migration-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-migration-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-migration-server-internal']
---
import kbnCoreSavedObjectsMigrationServerInternalObj from './kbn_core_saved_objects_migration_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_migration_server_mocks.mdx b/api_docs/kbn_core_saved_objects_migration_server_mocks.mdx
index 999f05a6310b..2ac88b2dbb40 100644
--- a/api_docs/kbn_core_saved_objects_migration_server_mocks.mdx
+++ b/api_docs/kbn_core_saved_objects_migration_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-migration-server-mocks
title: "@kbn/core-saved-objects-migration-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-migration-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-migration-server-mocks']
---
import kbnCoreSavedObjectsMigrationServerMocksObj from './kbn_core_saved_objects_migration_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_server.devdocs.json b/api_docs/kbn_core_saved_objects_server.devdocs.json
index c4635d0fad2e..709ab639e063 100644
--- a/api_docs/kbn_core_saved_objects_server.devdocs.json
+++ b/api_docs/kbn_core_saved_objects_server.devdocs.json
@@ -10493,10 +10493,6 @@
"plugin": "@kbn/core-usage-data-server-internal",
"path": "packages/core/usage-data/core-usage-data-server-internal/src/saved_objects/core_usage_stats.ts"
},
- {
- "plugin": "taskManager",
- "path": "x-pack/plugins/task_manager/server/saved_objects/index.ts"
- },
{
"plugin": "spaces",
"path": "x-pack/plugins/spaces/server/saved_objects/saved_objects_service.ts"
@@ -10505,6 +10501,10 @@
"plugin": "spaces",
"path": "x-pack/plugins/spaces/server/saved_objects/saved_objects_service.ts"
},
+ {
+ "plugin": "taskManager",
+ "path": "x-pack/plugins/task_manager/server/saved_objects/index.ts"
+ },
{
"plugin": "actions",
"path": "x-pack/plugins/actions/server/saved_objects/index.ts"
diff --git a/api_docs/kbn_core_saved_objects_server.mdx b/api_docs/kbn_core_saved_objects_server.mdx
index 283338f8a35f..04364fe6e8af 100644
--- a/api_docs/kbn_core_saved_objects_server.mdx
+++ b/api_docs/kbn_core_saved_objects_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-server
title: "@kbn/core-saved-objects-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-server']
---
import kbnCoreSavedObjectsServerObj from './kbn_core_saved_objects_server.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_server_internal.mdx b/api_docs/kbn_core_saved_objects_server_internal.mdx
index 6994545f3df2..e0b4181e08cb 100644
--- a/api_docs/kbn_core_saved_objects_server_internal.mdx
+++ b/api_docs/kbn_core_saved_objects_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-server-internal
title: "@kbn/core-saved-objects-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-server-internal']
---
import kbnCoreSavedObjectsServerInternalObj from './kbn_core_saved_objects_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_server_mocks.mdx b/api_docs/kbn_core_saved_objects_server_mocks.mdx
index 03281498f49d..397dc68efa13 100644
--- a/api_docs/kbn_core_saved_objects_server_mocks.mdx
+++ b/api_docs/kbn_core_saved_objects_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-server-mocks
title: "@kbn/core-saved-objects-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-server-mocks']
---
import kbnCoreSavedObjectsServerMocksObj from './kbn_core_saved_objects_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_saved_objects_utils_server.mdx b/api_docs/kbn_core_saved_objects_utils_server.mdx
index e0a3fd4e11e2..6ed5b77a1530 100644
--- a/api_docs/kbn_core_saved_objects_utils_server.mdx
+++ b/api_docs/kbn_core_saved_objects_utils_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-saved-objects-utils-server
title: "@kbn/core-saved-objects-utils-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-saved-objects-utils-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-saved-objects-utils-server']
---
import kbnCoreSavedObjectsUtilsServerObj from './kbn_core_saved_objects_utils_server.devdocs.json';
diff --git a/api_docs/kbn_core_status_common.mdx b/api_docs/kbn_core_status_common.mdx
index 769ce12fcaf2..4f80ac9df07a 100644
--- a/api_docs/kbn_core_status_common.mdx
+++ b/api_docs/kbn_core_status_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-status-common
title: "@kbn/core-status-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-status-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-status-common']
---
import kbnCoreStatusCommonObj from './kbn_core_status_common.devdocs.json';
diff --git a/api_docs/kbn_core_status_common_internal.mdx b/api_docs/kbn_core_status_common_internal.mdx
index e0235ccf219f..1f4870db1090 100644
--- a/api_docs/kbn_core_status_common_internal.mdx
+++ b/api_docs/kbn_core_status_common_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-status-common-internal
title: "@kbn/core-status-common-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-status-common-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-status-common-internal']
---
import kbnCoreStatusCommonInternalObj from './kbn_core_status_common_internal.devdocs.json';
diff --git a/api_docs/kbn_core_status_server.mdx b/api_docs/kbn_core_status_server.mdx
index 803bf7204b63..191ca6b7a0b2 100644
--- a/api_docs/kbn_core_status_server.mdx
+++ b/api_docs/kbn_core_status_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-status-server
title: "@kbn/core-status-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-status-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-status-server']
---
import kbnCoreStatusServerObj from './kbn_core_status_server.devdocs.json';
diff --git a/api_docs/kbn_core_status_server_internal.mdx b/api_docs/kbn_core_status_server_internal.mdx
index 5bb602ae1f19..57fb49bc2926 100644
--- a/api_docs/kbn_core_status_server_internal.mdx
+++ b/api_docs/kbn_core_status_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-status-server-internal
title: "@kbn/core-status-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-status-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-status-server-internal']
---
import kbnCoreStatusServerInternalObj from './kbn_core_status_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_status_server_mocks.mdx b/api_docs/kbn_core_status_server_mocks.mdx
index 31dab833dbd9..71cd2d4f5eb3 100644
--- a/api_docs/kbn_core_status_server_mocks.mdx
+++ b/api_docs/kbn_core_status_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-status-server-mocks
title: "@kbn/core-status-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-status-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-status-server-mocks']
---
import kbnCoreStatusServerMocksObj from './kbn_core_status_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_test_helpers_deprecations_getters.mdx b/api_docs/kbn_core_test_helpers_deprecations_getters.mdx
index 7440b9dc15e0..6a13ff52f72f 100644
--- a/api_docs/kbn_core_test_helpers_deprecations_getters.mdx
+++ b/api_docs/kbn_core_test_helpers_deprecations_getters.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-test-helpers-deprecations-getters
title: "@kbn/core-test-helpers-deprecations-getters"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-test-helpers-deprecations-getters plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-test-helpers-deprecations-getters']
---
import kbnCoreTestHelpersDeprecationsGettersObj from './kbn_core_test_helpers_deprecations_getters.devdocs.json';
diff --git a/api_docs/kbn_core_test_helpers_http_setup_browser.mdx b/api_docs/kbn_core_test_helpers_http_setup_browser.mdx
index e815c9c1c1ab..37ea27eb969c 100644
--- a/api_docs/kbn_core_test_helpers_http_setup_browser.mdx
+++ b/api_docs/kbn_core_test_helpers_http_setup_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-test-helpers-http-setup-browser
title: "@kbn/core-test-helpers-http-setup-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-test-helpers-http-setup-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-test-helpers-http-setup-browser']
---
import kbnCoreTestHelpersHttpSetupBrowserObj from './kbn_core_test_helpers_http_setup_browser.devdocs.json';
diff --git a/api_docs/kbn_core_test_helpers_kbn_server.mdx b/api_docs/kbn_core_test_helpers_kbn_server.mdx
index 671c2f8632b1..4c021f14ad4a 100644
--- a/api_docs/kbn_core_test_helpers_kbn_server.mdx
+++ b/api_docs/kbn_core_test_helpers_kbn_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-test-helpers-kbn-server
title: "@kbn/core-test-helpers-kbn-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-test-helpers-kbn-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-test-helpers-kbn-server']
---
import kbnCoreTestHelpersKbnServerObj from './kbn_core_test_helpers_kbn_server.devdocs.json';
diff --git a/api_docs/kbn_core_test_helpers_model_versions.devdocs.json b/api_docs/kbn_core_test_helpers_model_versions.devdocs.json
index 7e2f256a95f8..f77cfd048a4d 100644
--- a/api_docs/kbn_core_test_helpers_model_versions.devdocs.json
+++ b/api_docs/kbn_core_test_helpers_model_versions.devdocs.json
@@ -302,10 +302,10 @@
},
{
"parentPluginId": "@kbn/core-test-helpers-model-versions",
- "id": "def-common.ModelVersionTestKit.tearsDown",
+ "id": "def-common.ModelVersionTestKit.tearDown",
"type": "Function",
"tags": [],
- "label": "tearsDown",
+ "label": "tearDown",
"description": [
"\nCleanup function that will delete the test index.\nShould be called before calling `testbed.prepareTestKit` again."
],
diff --git a/api_docs/kbn_core_test_helpers_model_versions.mdx b/api_docs/kbn_core_test_helpers_model_versions.mdx
index 61bba23a8e23..9f703c42fc30 100644
--- a/api_docs/kbn_core_test_helpers_model_versions.mdx
+++ b/api_docs/kbn_core_test_helpers_model_versions.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-test-helpers-model-versions
title: "@kbn/core-test-helpers-model-versions"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-test-helpers-model-versions plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-test-helpers-model-versions']
---
import kbnCoreTestHelpersModelVersionsObj from './kbn_core_test_helpers_model_versions.devdocs.json';
diff --git a/api_docs/kbn_core_test_helpers_so_type_serializer.mdx b/api_docs/kbn_core_test_helpers_so_type_serializer.mdx
index 041965626cc2..bb9932cdddb4 100644
--- a/api_docs/kbn_core_test_helpers_so_type_serializer.mdx
+++ b/api_docs/kbn_core_test_helpers_so_type_serializer.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-test-helpers-so-type-serializer
title: "@kbn/core-test-helpers-so-type-serializer"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-test-helpers-so-type-serializer plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-test-helpers-so-type-serializer']
---
import kbnCoreTestHelpersSoTypeSerializerObj from './kbn_core_test_helpers_so_type_serializer.devdocs.json';
diff --git a/api_docs/kbn_core_test_helpers_test_utils.mdx b/api_docs/kbn_core_test_helpers_test_utils.mdx
index da6ef4c87ac0..da7bc3b05270 100644
--- a/api_docs/kbn_core_test_helpers_test_utils.mdx
+++ b/api_docs/kbn_core_test_helpers_test_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-test-helpers-test-utils
title: "@kbn/core-test-helpers-test-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-test-helpers-test-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-test-helpers-test-utils']
---
import kbnCoreTestHelpersTestUtilsObj from './kbn_core_test_helpers_test_utils.devdocs.json';
diff --git a/api_docs/kbn_core_theme_browser.mdx b/api_docs/kbn_core_theme_browser.mdx
index 63aeaf61c5a2..22a2da1998e4 100644
--- a/api_docs/kbn_core_theme_browser.mdx
+++ b/api_docs/kbn_core_theme_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-theme-browser
title: "@kbn/core-theme-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-theme-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-theme-browser']
---
import kbnCoreThemeBrowserObj from './kbn_core_theme_browser.devdocs.json';
diff --git a/api_docs/kbn_core_theme_browser_mocks.mdx b/api_docs/kbn_core_theme_browser_mocks.mdx
index 3099e1e2eaf8..6ef9e4f0c648 100644
--- a/api_docs/kbn_core_theme_browser_mocks.mdx
+++ b/api_docs/kbn_core_theme_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-theme-browser-mocks
title: "@kbn/core-theme-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-theme-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-theme-browser-mocks']
---
import kbnCoreThemeBrowserMocksObj from './kbn_core_theme_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_browser.mdx b/api_docs/kbn_core_ui_settings_browser.mdx
index 51501026ba9e..ec6a8f004f95 100644
--- a/api_docs/kbn_core_ui_settings_browser.mdx
+++ b/api_docs/kbn_core_ui_settings_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-browser
title: "@kbn/core-ui-settings-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-browser']
---
import kbnCoreUiSettingsBrowserObj from './kbn_core_ui_settings_browser.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_browser_internal.mdx b/api_docs/kbn_core_ui_settings_browser_internal.mdx
index 143043ac3439..87900c60291d 100644
--- a/api_docs/kbn_core_ui_settings_browser_internal.mdx
+++ b/api_docs/kbn_core_ui_settings_browser_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-browser-internal
title: "@kbn/core-ui-settings-browser-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-browser-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-browser-internal']
---
import kbnCoreUiSettingsBrowserInternalObj from './kbn_core_ui_settings_browser_internal.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_browser_mocks.mdx b/api_docs/kbn_core_ui_settings_browser_mocks.mdx
index 181ce3f7f5e3..6dbc30bbca9b 100644
--- a/api_docs/kbn_core_ui_settings_browser_mocks.mdx
+++ b/api_docs/kbn_core_ui_settings_browser_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-browser-mocks
title: "@kbn/core-ui-settings-browser-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-browser-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-browser-mocks']
---
import kbnCoreUiSettingsBrowserMocksObj from './kbn_core_ui_settings_browser_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_common.mdx b/api_docs/kbn_core_ui_settings_common.mdx
index 4558e40ea300..2e1bfea2d265 100644
--- a/api_docs/kbn_core_ui_settings_common.mdx
+++ b/api_docs/kbn_core_ui_settings_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-common
title: "@kbn/core-ui-settings-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-common']
---
import kbnCoreUiSettingsCommonObj from './kbn_core_ui_settings_common.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_server.mdx b/api_docs/kbn_core_ui_settings_server.mdx
index 3eeb315dbc3c..4a98ee9f86a1 100644
--- a/api_docs/kbn_core_ui_settings_server.mdx
+++ b/api_docs/kbn_core_ui_settings_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-server
title: "@kbn/core-ui-settings-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-server']
---
import kbnCoreUiSettingsServerObj from './kbn_core_ui_settings_server.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_server_internal.mdx b/api_docs/kbn_core_ui_settings_server_internal.mdx
index fc3dca546094..9c867901bb20 100644
--- a/api_docs/kbn_core_ui_settings_server_internal.mdx
+++ b/api_docs/kbn_core_ui_settings_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-server-internal
title: "@kbn/core-ui-settings-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-server-internal']
---
import kbnCoreUiSettingsServerInternalObj from './kbn_core_ui_settings_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_ui_settings_server_mocks.mdx b/api_docs/kbn_core_ui_settings_server_mocks.mdx
index 7f2a09a5d570..4417e310d196 100644
--- a/api_docs/kbn_core_ui_settings_server_mocks.mdx
+++ b/api_docs/kbn_core_ui_settings_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-ui-settings-server-mocks
title: "@kbn/core-ui-settings-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-ui-settings-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-ui-settings-server-mocks']
---
import kbnCoreUiSettingsServerMocksObj from './kbn_core_ui_settings_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_usage_data_server.mdx b/api_docs/kbn_core_usage_data_server.mdx
index 08f07062920b..3d37107882b3 100644
--- a/api_docs/kbn_core_usage_data_server.mdx
+++ b/api_docs/kbn_core_usage_data_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-usage-data-server
title: "@kbn/core-usage-data-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-usage-data-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-usage-data-server']
---
import kbnCoreUsageDataServerObj from './kbn_core_usage_data_server.devdocs.json';
diff --git a/api_docs/kbn_core_usage_data_server_internal.mdx b/api_docs/kbn_core_usage_data_server_internal.mdx
index 9851bc40bc84..03b4aac942c6 100644
--- a/api_docs/kbn_core_usage_data_server_internal.mdx
+++ b/api_docs/kbn_core_usage_data_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-usage-data-server-internal
title: "@kbn/core-usage-data-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-usage-data-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-usage-data-server-internal']
---
import kbnCoreUsageDataServerInternalObj from './kbn_core_usage_data_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_usage_data_server_mocks.mdx b/api_docs/kbn_core_usage_data_server_mocks.mdx
index a110f573b6b4..17778b71193e 100644
--- a/api_docs/kbn_core_usage_data_server_mocks.mdx
+++ b/api_docs/kbn_core_usage_data_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-usage-data-server-mocks
title: "@kbn/core-usage-data-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-usage-data-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-usage-data-server-mocks']
---
import kbnCoreUsageDataServerMocksObj from './kbn_core_usage_data_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_core_user_settings_server.mdx b/api_docs/kbn_core_user_settings_server.mdx
index 06668c434cab..642761ddc69d 100644
--- a/api_docs/kbn_core_user_settings_server.mdx
+++ b/api_docs/kbn_core_user_settings_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-user-settings-server
title: "@kbn/core-user-settings-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-user-settings-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-user-settings-server']
---
import kbnCoreUserSettingsServerObj from './kbn_core_user_settings_server.devdocs.json';
diff --git a/api_docs/kbn_core_user_settings_server_internal.mdx b/api_docs/kbn_core_user_settings_server_internal.mdx
index ad9cf36c0b89..dacd3243f77c 100644
--- a/api_docs/kbn_core_user_settings_server_internal.mdx
+++ b/api_docs/kbn_core_user_settings_server_internal.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-user-settings-server-internal
title: "@kbn/core-user-settings-server-internal"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-user-settings-server-internal plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-user-settings-server-internal']
---
import kbnCoreUserSettingsServerInternalObj from './kbn_core_user_settings_server_internal.devdocs.json';
diff --git a/api_docs/kbn_core_user_settings_server_mocks.mdx b/api_docs/kbn_core_user_settings_server_mocks.mdx
index cea6ba5a5d46..c165791a36b7 100644
--- a/api_docs/kbn_core_user_settings_server_mocks.mdx
+++ b/api_docs/kbn_core_user_settings_server_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-core-user-settings-server-mocks
title: "@kbn/core-user-settings-server-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/core-user-settings-server-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/core-user-settings-server-mocks']
---
import kbnCoreUserSettingsServerMocksObj from './kbn_core_user_settings_server_mocks.devdocs.json';
diff --git a/api_docs/kbn_crypto.mdx b/api_docs/kbn_crypto.mdx
index 5870ee269840..760d03ccdba5 100644
--- a/api_docs/kbn_crypto.mdx
+++ b/api_docs/kbn_crypto.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-crypto
title: "@kbn/crypto"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/crypto plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/crypto']
---
import kbnCryptoObj from './kbn_crypto.devdocs.json';
diff --git a/api_docs/kbn_crypto_browser.mdx b/api_docs/kbn_crypto_browser.mdx
index 7772bca586b5..815ce1944ae7 100644
--- a/api_docs/kbn_crypto_browser.mdx
+++ b/api_docs/kbn_crypto_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-crypto-browser
title: "@kbn/crypto-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/crypto-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/crypto-browser']
---
import kbnCryptoBrowserObj from './kbn_crypto_browser.devdocs.json';
diff --git a/api_docs/kbn_custom_icons.mdx b/api_docs/kbn_custom_icons.mdx
index 1f8c2956c01b..ff8396d51329 100644
--- a/api_docs/kbn_custom_icons.mdx
+++ b/api_docs/kbn_custom_icons.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-custom-icons
title: "@kbn/custom-icons"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/custom-icons plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/custom-icons']
---
import kbnCustomIconsObj from './kbn_custom_icons.devdocs.json';
diff --git a/api_docs/kbn_custom_integrations.mdx b/api_docs/kbn_custom_integrations.mdx
index 951a82711327..de5d5dc5119d 100644
--- a/api_docs/kbn_custom_integrations.mdx
+++ b/api_docs/kbn_custom_integrations.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-custom-integrations
title: "@kbn/custom-integrations"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/custom-integrations plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/custom-integrations']
---
import kbnCustomIntegrationsObj from './kbn_custom_integrations.devdocs.json';
diff --git a/api_docs/kbn_cypress_config.mdx b/api_docs/kbn_cypress_config.mdx
index ee79fd062c33..679317b1b617 100644
--- a/api_docs/kbn_cypress_config.mdx
+++ b/api_docs/kbn_cypress_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-cypress-config
title: "@kbn/cypress-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/cypress-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/cypress-config']
---
import kbnCypressConfigObj from './kbn_cypress_config.devdocs.json';
diff --git a/api_docs/kbn_data_forge.mdx b/api_docs/kbn_data_forge.mdx
index 3ecf02106d5a..d981955c17c9 100644
--- a/api_docs/kbn_data_forge.mdx
+++ b/api_docs/kbn_data_forge.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-data-forge
title: "@kbn/data-forge"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/data-forge plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/data-forge']
---
import kbnDataForgeObj from './kbn_data_forge.devdocs.json';
diff --git a/api_docs/kbn_data_service.mdx b/api_docs/kbn_data_service.mdx
index b106c1347c1d..5d9046245f4b 100644
--- a/api_docs/kbn_data_service.mdx
+++ b/api_docs/kbn_data_service.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-data-service
title: "@kbn/data-service"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/data-service plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/data-service']
---
import kbnDataServiceObj from './kbn_data_service.devdocs.json';
diff --git a/api_docs/kbn_data_stream_adapter.mdx b/api_docs/kbn_data_stream_adapter.mdx
index 54b655ad6824..a147155b1634 100644
--- a/api_docs/kbn_data_stream_adapter.mdx
+++ b/api_docs/kbn_data_stream_adapter.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-data-stream-adapter
title: "@kbn/data-stream-adapter"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/data-stream-adapter plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/data-stream-adapter']
---
import kbnDataStreamAdapterObj from './kbn_data_stream_adapter.devdocs.json';
diff --git a/api_docs/kbn_data_view_utils.mdx b/api_docs/kbn_data_view_utils.mdx
index 41c4225f7110..473e9533c16f 100644
--- a/api_docs/kbn_data_view_utils.mdx
+++ b/api_docs/kbn_data_view_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-data-view-utils
title: "@kbn/data-view-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/data-view-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/data-view-utils']
---
import kbnDataViewUtilsObj from './kbn_data_view_utils.devdocs.json';
diff --git a/api_docs/kbn_datemath.mdx b/api_docs/kbn_datemath.mdx
index a72830d79892..18f500fd6033 100644
--- a/api_docs/kbn_datemath.mdx
+++ b/api_docs/kbn_datemath.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-datemath
title: "@kbn/datemath"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/datemath plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/datemath']
---
import kbnDatemathObj from './kbn_datemath.devdocs.json';
diff --git a/api_docs/kbn_deeplinks_analytics.mdx b/api_docs/kbn_deeplinks_analytics.mdx
index bc1440ca6ce1..c246b0be6243 100644
--- a/api_docs/kbn_deeplinks_analytics.mdx
+++ b/api_docs/kbn_deeplinks_analytics.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-deeplinks-analytics
title: "@kbn/deeplinks-analytics"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/deeplinks-analytics plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/deeplinks-analytics']
---
import kbnDeeplinksAnalyticsObj from './kbn_deeplinks_analytics.devdocs.json';
diff --git a/api_docs/kbn_deeplinks_devtools.mdx b/api_docs/kbn_deeplinks_devtools.mdx
index 75c1d3c30eb2..b743c6bc74a3 100644
--- a/api_docs/kbn_deeplinks_devtools.mdx
+++ b/api_docs/kbn_deeplinks_devtools.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-deeplinks-devtools
title: "@kbn/deeplinks-devtools"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/deeplinks-devtools plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/deeplinks-devtools']
---
import kbnDeeplinksDevtoolsObj from './kbn_deeplinks_devtools.devdocs.json';
diff --git a/api_docs/kbn_deeplinks_management.mdx b/api_docs/kbn_deeplinks_management.mdx
index a978f5ae26e0..9e36ea142a56 100644
--- a/api_docs/kbn_deeplinks_management.mdx
+++ b/api_docs/kbn_deeplinks_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-deeplinks-management
title: "@kbn/deeplinks-management"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/deeplinks-management plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/deeplinks-management']
---
import kbnDeeplinksManagementObj from './kbn_deeplinks_management.devdocs.json';
diff --git a/api_docs/kbn_deeplinks_ml.mdx b/api_docs/kbn_deeplinks_ml.mdx
index 0ccc2d4f7c20..70037b3ce150 100644
--- a/api_docs/kbn_deeplinks_ml.mdx
+++ b/api_docs/kbn_deeplinks_ml.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-deeplinks-ml
title: "@kbn/deeplinks-ml"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/deeplinks-ml plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/deeplinks-ml']
---
import kbnDeeplinksMlObj from './kbn_deeplinks_ml.devdocs.json';
diff --git a/api_docs/kbn_deeplinks_observability.mdx b/api_docs/kbn_deeplinks_observability.mdx
index 89ae96533942..9a03f340ff02 100644
--- a/api_docs/kbn_deeplinks_observability.mdx
+++ b/api_docs/kbn_deeplinks_observability.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-deeplinks-observability
title: "@kbn/deeplinks-observability"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/deeplinks-observability plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/deeplinks-observability']
---
import kbnDeeplinksObservabilityObj from './kbn_deeplinks_observability.devdocs.json';
diff --git a/api_docs/kbn_deeplinks_search.mdx b/api_docs/kbn_deeplinks_search.mdx
index 36f58b074f28..a62a0c95bdb4 100644
--- a/api_docs/kbn_deeplinks_search.mdx
+++ b/api_docs/kbn_deeplinks_search.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-deeplinks-search
title: "@kbn/deeplinks-search"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/deeplinks-search plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/deeplinks-search']
---
import kbnDeeplinksSearchObj from './kbn_deeplinks_search.devdocs.json';
diff --git a/api_docs/kbn_default_nav_analytics.mdx b/api_docs/kbn_default_nav_analytics.mdx
index 42e82db2fca4..c14478844edf 100644
--- a/api_docs/kbn_default_nav_analytics.mdx
+++ b/api_docs/kbn_default_nav_analytics.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-default-nav-analytics
title: "@kbn/default-nav-analytics"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/default-nav-analytics plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/default-nav-analytics']
---
import kbnDefaultNavAnalyticsObj from './kbn_default_nav_analytics.devdocs.json';
diff --git a/api_docs/kbn_default_nav_devtools.mdx b/api_docs/kbn_default_nav_devtools.mdx
index 6532bede1f24..673fb8d0e581 100644
--- a/api_docs/kbn_default_nav_devtools.mdx
+++ b/api_docs/kbn_default_nav_devtools.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-default-nav-devtools
title: "@kbn/default-nav-devtools"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/default-nav-devtools plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/default-nav-devtools']
---
import kbnDefaultNavDevtoolsObj from './kbn_default_nav_devtools.devdocs.json';
diff --git a/api_docs/kbn_default_nav_management.mdx b/api_docs/kbn_default_nav_management.mdx
index 115f30c2c69b..ddfc3bf3e3f9 100644
--- a/api_docs/kbn_default_nav_management.mdx
+++ b/api_docs/kbn_default_nav_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-default-nav-management
title: "@kbn/default-nav-management"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/default-nav-management plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/default-nav-management']
---
import kbnDefaultNavManagementObj from './kbn_default_nav_management.devdocs.json';
diff --git a/api_docs/kbn_default_nav_ml.mdx b/api_docs/kbn_default_nav_ml.mdx
index 8705bc18efd0..08e50d96844d 100644
--- a/api_docs/kbn_default_nav_ml.mdx
+++ b/api_docs/kbn_default_nav_ml.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-default-nav-ml
title: "@kbn/default-nav-ml"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/default-nav-ml plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/default-nav-ml']
---
import kbnDefaultNavMlObj from './kbn_default_nav_ml.devdocs.json';
diff --git a/api_docs/kbn_dev_cli_errors.mdx b/api_docs/kbn_dev_cli_errors.mdx
index 76accc6f195b..614314445ae2 100644
--- a/api_docs/kbn_dev_cli_errors.mdx
+++ b/api_docs/kbn_dev_cli_errors.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-dev-cli-errors
title: "@kbn/dev-cli-errors"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/dev-cli-errors plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/dev-cli-errors']
---
import kbnDevCliErrorsObj from './kbn_dev_cli_errors.devdocs.json';
diff --git a/api_docs/kbn_dev_cli_runner.mdx b/api_docs/kbn_dev_cli_runner.mdx
index 8b79b98a1d33..d046e1a00ebc 100644
--- a/api_docs/kbn_dev_cli_runner.mdx
+++ b/api_docs/kbn_dev_cli_runner.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-dev-cli-runner
title: "@kbn/dev-cli-runner"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/dev-cli-runner plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/dev-cli-runner']
---
import kbnDevCliRunnerObj from './kbn_dev_cli_runner.devdocs.json';
diff --git a/api_docs/kbn_dev_proc_runner.mdx b/api_docs/kbn_dev_proc_runner.mdx
index 7af9c885c369..5e3bd4aef3f1 100644
--- a/api_docs/kbn_dev_proc_runner.mdx
+++ b/api_docs/kbn_dev_proc_runner.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-dev-proc-runner
title: "@kbn/dev-proc-runner"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/dev-proc-runner plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/dev-proc-runner']
---
import kbnDevProcRunnerObj from './kbn_dev_proc_runner.devdocs.json';
diff --git a/api_docs/kbn_dev_utils.mdx b/api_docs/kbn_dev_utils.mdx
index e7dd04b03af8..b286662d9b71 100644
--- a/api_docs/kbn_dev_utils.mdx
+++ b/api_docs/kbn_dev_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-dev-utils
title: "@kbn/dev-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/dev-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/dev-utils']
---
import kbnDevUtilsObj from './kbn_dev_utils.devdocs.json';
diff --git a/api_docs/kbn_discover_utils.mdx b/api_docs/kbn_discover_utils.mdx
index 12c128d57c10..66b12cc3550d 100644
--- a/api_docs/kbn_discover_utils.mdx
+++ b/api_docs/kbn_discover_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-discover-utils
title: "@kbn/discover-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/discover-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/discover-utils']
---
import kbnDiscoverUtilsObj from './kbn_discover_utils.devdocs.json';
diff --git a/api_docs/kbn_doc_links.mdx b/api_docs/kbn_doc_links.mdx
index 221e5df40cf3..3f694130bbd3 100644
--- a/api_docs/kbn_doc_links.mdx
+++ b/api_docs/kbn_doc_links.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-doc-links
title: "@kbn/doc-links"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/doc-links plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/doc-links']
---
import kbnDocLinksObj from './kbn_doc_links.devdocs.json';
diff --git a/api_docs/kbn_docs_utils.mdx b/api_docs/kbn_docs_utils.mdx
index 981799bab15c..b1ecb6174fd3 100644
--- a/api_docs/kbn_docs_utils.mdx
+++ b/api_docs/kbn_docs_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-docs-utils
title: "@kbn/docs-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/docs-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/docs-utils']
---
import kbnDocsUtilsObj from './kbn_docs_utils.devdocs.json';
diff --git a/api_docs/kbn_dom_drag_drop.mdx b/api_docs/kbn_dom_drag_drop.mdx
index 942bac744d8b..9968ca587ffc 100644
--- a/api_docs/kbn_dom_drag_drop.mdx
+++ b/api_docs/kbn_dom_drag_drop.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-dom-drag-drop
title: "@kbn/dom-drag-drop"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/dom-drag-drop plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/dom-drag-drop']
---
import kbnDomDragDropObj from './kbn_dom_drag_drop.devdocs.json';
diff --git a/api_docs/kbn_ebt_tools.mdx b/api_docs/kbn_ebt_tools.mdx
index 58cb658fdc2c..3566af913788 100644
--- a/api_docs/kbn_ebt_tools.mdx
+++ b/api_docs/kbn_ebt_tools.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ebt-tools
title: "@kbn/ebt-tools"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ebt-tools plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ebt-tools']
---
import kbnEbtToolsObj from './kbn_ebt_tools.devdocs.json';
diff --git a/api_docs/kbn_ecs_data_quality_dashboard.mdx b/api_docs/kbn_ecs_data_quality_dashboard.mdx
index 2d9a2badfc58..07e1bc800fef 100644
--- a/api_docs/kbn_ecs_data_quality_dashboard.mdx
+++ b/api_docs/kbn_ecs_data_quality_dashboard.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ecs-data-quality-dashboard
title: "@kbn/ecs-data-quality-dashboard"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ecs-data-quality-dashboard plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ecs-data-quality-dashboard']
---
import kbnEcsDataQualityDashboardObj from './kbn_ecs_data_quality_dashboard.devdocs.json';
diff --git a/api_docs/kbn_elastic_agent_utils.mdx b/api_docs/kbn_elastic_agent_utils.mdx
index 04841b5cfd27..c08ae404569b 100644
--- a/api_docs/kbn_elastic_agent_utils.mdx
+++ b/api_docs/kbn_elastic_agent_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-elastic-agent-utils
title: "@kbn/elastic-agent-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/elastic-agent-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/elastic-agent-utils']
---
import kbnElasticAgentUtilsObj from './kbn_elastic_agent_utils.devdocs.json';
diff --git a/api_docs/kbn_elastic_assistant.mdx b/api_docs/kbn_elastic_assistant.mdx
index a87ed61d5106..b1f5ee36aa4c 100644
--- a/api_docs/kbn_elastic_assistant.mdx
+++ b/api_docs/kbn_elastic_assistant.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-elastic-assistant
title: "@kbn/elastic-assistant"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/elastic-assistant plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/elastic-assistant']
---
import kbnElasticAssistantObj from './kbn_elastic_assistant.devdocs.json';
diff --git a/api_docs/kbn_elastic_assistant_common.mdx b/api_docs/kbn_elastic_assistant_common.mdx
index a878a53a5c4c..c615cb0832cf 100644
--- a/api_docs/kbn_elastic_assistant_common.mdx
+++ b/api_docs/kbn_elastic_assistant_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-elastic-assistant-common
title: "@kbn/elastic-assistant-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/elastic-assistant-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/elastic-assistant-common']
---
import kbnElasticAssistantCommonObj from './kbn_elastic_assistant_common.devdocs.json';
diff --git a/api_docs/kbn_es.mdx b/api_docs/kbn_es.mdx
index 6ea62ec5e53d..9ae9dc62f37f 100644
--- a/api_docs/kbn_es.mdx
+++ b/api_docs/kbn_es.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-es
title: "@kbn/es"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/es plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/es']
---
import kbnEsObj from './kbn_es.devdocs.json';
diff --git a/api_docs/kbn_es_archiver.mdx b/api_docs/kbn_es_archiver.mdx
index 73cbd7959e6b..c2ea0505f7ee 100644
--- a/api_docs/kbn_es_archiver.mdx
+++ b/api_docs/kbn_es_archiver.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-es-archiver
title: "@kbn/es-archiver"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/es-archiver plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/es-archiver']
---
import kbnEsArchiverObj from './kbn_es_archiver.devdocs.json';
diff --git a/api_docs/kbn_es_errors.mdx b/api_docs/kbn_es_errors.mdx
index e870edbb0d3c..06062cb78c3e 100644
--- a/api_docs/kbn_es_errors.mdx
+++ b/api_docs/kbn_es_errors.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-es-errors
title: "@kbn/es-errors"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/es-errors plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/es-errors']
---
import kbnEsErrorsObj from './kbn_es_errors.devdocs.json';
diff --git a/api_docs/kbn_es_query.mdx b/api_docs/kbn_es_query.mdx
index a6d44ced6331..40a30aa5f19c 100644
--- a/api_docs/kbn_es_query.mdx
+++ b/api_docs/kbn_es_query.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-es-query
title: "@kbn/es-query"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/es-query plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/es-query']
---
import kbnEsQueryObj from './kbn_es_query.devdocs.json';
diff --git a/api_docs/kbn_es_types.mdx b/api_docs/kbn_es_types.mdx
index 95b01bf154f5..ba73b2eff06e 100644
--- a/api_docs/kbn_es_types.mdx
+++ b/api_docs/kbn_es_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-es-types
title: "@kbn/es-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/es-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/es-types']
---
import kbnEsTypesObj from './kbn_es_types.devdocs.json';
diff --git a/api_docs/kbn_eslint_plugin_imports.mdx b/api_docs/kbn_eslint_plugin_imports.mdx
index f11d61d3a639..3bd2ba67bb27 100644
--- a/api_docs/kbn_eslint_plugin_imports.mdx
+++ b/api_docs/kbn_eslint_plugin_imports.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-eslint-plugin-imports
title: "@kbn/eslint-plugin-imports"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/eslint-plugin-imports plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/eslint-plugin-imports']
---
import kbnEslintPluginImportsObj from './kbn_eslint_plugin_imports.devdocs.json';
diff --git a/api_docs/kbn_esql_utils.mdx b/api_docs/kbn_esql_utils.mdx
index d0a1ee62f910..e5d7be66c296 100644
--- a/api_docs/kbn_esql_utils.mdx
+++ b/api_docs/kbn_esql_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-esql-utils
title: "@kbn/esql-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/esql-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/esql-utils']
---
import kbnEsqlUtilsObj from './kbn_esql_utils.devdocs.json';
diff --git a/api_docs/kbn_event_annotation_common.mdx b/api_docs/kbn_event_annotation_common.mdx
index 5d8278bf935e..3664d726239d 100644
--- a/api_docs/kbn_event_annotation_common.mdx
+++ b/api_docs/kbn_event_annotation_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-event-annotation-common
title: "@kbn/event-annotation-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/event-annotation-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/event-annotation-common']
---
import kbnEventAnnotationCommonObj from './kbn_event_annotation_common.devdocs.json';
diff --git a/api_docs/kbn_event_annotation_components.mdx b/api_docs/kbn_event_annotation_components.mdx
index 119a526c30ae..e54f6d85b6c5 100644
--- a/api_docs/kbn_event_annotation_components.mdx
+++ b/api_docs/kbn_event_annotation_components.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-event-annotation-components
title: "@kbn/event-annotation-components"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/event-annotation-components plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/event-annotation-components']
---
import kbnEventAnnotationComponentsObj from './kbn_event_annotation_components.devdocs.json';
diff --git a/api_docs/kbn_expandable_flyout.mdx b/api_docs/kbn_expandable_flyout.mdx
index 49ef9f750869..fd596f1e70c7 100644
--- a/api_docs/kbn_expandable_flyout.mdx
+++ b/api_docs/kbn_expandable_flyout.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-expandable-flyout
title: "@kbn/expandable-flyout"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/expandable-flyout plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/expandable-flyout']
---
import kbnExpandableFlyoutObj from './kbn_expandable_flyout.devdocs.json';
diff --git a/api_docs/kbn_field_types.mdx b/api_docs/kbn_field_types.mdx
index cd71d63d172c..fe459c224e31 100644
--- a/api_docs/kbn_field_types.mdx
+++ b/api_docs/kbn_field_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-field-types
title: "@kbn/field-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/field-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/field-types']
---
import kbnFieldTypesObj from './kbn_field_types.devdocs.json';
diff --git a/api_docs/kbn_field_utils.mdx b/api_docs/kbn_field_utils.mdx
index 1c4c2cd0c8c7..96c7ef487771 100644
--- a/api_docs/kbn_field_utils.mdx
+++ b/api_docs/kbn_field_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-field-utils
title: "@kbn/field-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/field-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/field-utils']
---
import kbnFieldUtilsObj from './kbn_field_utils.devdocs.json';
diff --git a/api_docs/kbn_find_used_node_modules.mdx b/api_docs/kbn_find_used_node_modules.mdx
index afa769c6e5c3..030e2495bc63 100644
--- a/api_docs/kbn_find_used_node_modules.mdx
+++ b/api_docs/kbn_find_used_node_modules.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-find-used-node-modules
title: "@kbn/find-used-node-modules"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/find-used-node-modules plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/find-used-node-modules']
---
import kbnFindUsedNodeModulesObj from './kbn_find_used_node_modules.devdocs.json';
diff --git a/api_docs/kbn_formatters.mdx b/api_docs/kbn_formatters.mdx
index e388c360f2bf..ee01aab3d0f6 100644
--- a/api_docs/kbn_formatters.mdx
+++ b/api_docs/kbn_formatters.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-formatters
title: "@kbn/formatters"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/formatters plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/formatters']
---
import kbnFormattersObj from './kbn_formatters.devdocs.json';
diff --git a/api_docs/kbn_ftr_common_functional_services.mdx b/api_docs/kbn_ftr_common_functional_services.mdx
index 1675d1cddaeb..21a49519d63c 100644
--- a/api_docs/kbn_ftr_common_functional_services.mdx
+++ b/api_docs/kbn_ftr_common_functional_services.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ftr-common-functional-services
title: "@kbn/ftr-common-functional-services"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ftr-common-functional-services plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ftr-common-functional-services']
---
import kbnFtrCommonFunctionalServicesObj from './kbn_ftr_common_functional_services.devdocs.json';
diff --git a/api_docs/kbn_ftr_common_functional_ui_services.mdx b/api_docs/kbn_ftr_common_functional_ui_services.mdx
index 011dd7ab16a4..c6e82e7cc25f 100644
--- a/api_docs/kbn_ftr_common_functional_ui_services.mdx
+++ b/api_docs/kbn_ftr_common_functional_ui_services.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ftr-common-functional-ui-services
title: "@kbn/ftr-common-functional-ui-services"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ftr-common-functional-ui-services plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ftr-common-functional-ui-services']
---
import kbnFtrCommonFunctionalUiServicesObj from './kbn_ftr_common_functional_ui_services.devdocs.json';
diff --git a/api_docs/kbn_generate.mdx b/api_docs/kbn_generate.mdx
index 3fb9af74b7c7..3ab6c5b82916 100644
--- a/api_docs/kbn_generate.mdx
+++ b/api_docs/kbn_generate.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-generate
title: "@kbn/generate"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/generate plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/generate']
---
import kbnGenerateObj from './kbn_generate.devdocs.json';
diff --git a/api_docs/kbn_generate_console_definitions.mdx b/api_docs/kbn_generate_console_definitions.mdx
index f851074e1130..b31cc565eb07 100644
--- a/api_docs/kbn_generate_console_definitions.mdx
+++ b/api_docs/kbn_generate_console_definitions.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-generate-console-definitions
title: "@kbn/generate-console-definitions"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/generate-console-definitions plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/generate-console-definitions']
---
import kbnGenerateConsoleDefinitionsObj from './kbn_generate_console_definitions.devdocs.json';
diff --git a/api_docs/kbn_generate_csv.mdx b/api_docs/kbn_generate_csv.mdx
index 7214aab235f4..57c9ae1164ce 100644
--- a/api_docs/kbn_generate_csv.mdx
+++ b/api_docs/kbn_generate_csv.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-generate-csv
title: "@kbn/generate-csv"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/generate-csv plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/generate-csv']
---
import kbnGenerateCsvObj from './kbn_generate_csv.devdocs.json';
diff --git a/api_docs/kbn_guided_onboarding.mdx b/api_docs/kbn_guided_onboarding.mdx
index 10e55cd06f2d..207d0182ddee 100644
--- a/api_docs/kbn_guided_onboarding.mdx
+++ b/api_docs/kbn_guided_onboarding.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-guided-onboarding
title: "@kbn/guided-onboarding"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/guided-onboarding plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/guided-onboarding']
---
import kbnGuidedOnboardingObj from './kbn_guided_onboarding.devdocs.json';
diff --git a/api_docs/kbn_handlebars.mdx b/api_docs/kbn_handlebars.mdx
index a3db3c1de192..2856eb6f2041 100644
--- a/api_docs/kbn_handlebars.mdx
+++ b/api_docs/kbn_handlebars.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-handlebars
title: "@kbn/handlebars"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/handlebars plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/handlebars']
---
import kbnHandlebarsObj from './kbn_handlebars.devdocs.json';
diff --git a/api_docs/kbn_hapi_mocks.mdx b/api_docs/kbn_hapi_mocks.mdx
index 6aa12b88237c..6b4fe566a7dd 100644
--- a/api_docs/kbn_hapi_mocks.mdx
+++ b/api_docs/kbn_hapi_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-hapi-mocks
title: "@kbn/hapi-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/hapi-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/hapi-mocks']
---
import kbnHapiMocksObj from './kbn_hapi_mocks.devdocs.json';
diff --git a/api_docs/kbn_health_gateway_server.mdx b/api_docs/kbn_health_gateway_server.mdx
index 582bba4af3a1..a7e421d011b0 100644
--- a/api_docs/kbn_health_gateway_server.mdx
+++ b/api_docs/kbn_health_gateway_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-health-gateway-server
title: "@kbn/health-gateway-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/health-gateway-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/health-gateway-server']
---
import kbnHealthGatewayServerObj from './kbn_health_gateway_server.devdocs.json';
diff --git a/api_docs/kbn_home_sample_data_card.mdx b/api_docs/kbn_home_sample_data_card.mdx
index 1ee3c81e2d66..2961fb3babd5 100644
--- a/api_docs/kbn_home_sample_data_card.mdx
+++ b/api_docs/kbn_home_sample_data_card.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-home-sample-data-card
title: "@kbn/home-sample-data-card"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/home-sample-data-card plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/home-sample-data-card']
---
import kbnHomeSampleDataCardObj from './kbn_home_sample_data_card.devdocs.json';
diff --git a/api_docs/kbn_home_sample_data_tab.mdx b/api_docs/kbn_home_sample_data_tab.mdx
index 25ecab7c64d1..1fb8392651c8 100644
--- a/api_docs/kbn_home_sample_data_tab.mdx
+++ b/api_docs/kbn_home_sample_data_tab.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-home-sample-data-tab
title: "@kbn/home-sample-data-tab"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/home-sample-data-tab plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/home-sample-data-tab']
---
import kbnHomeSampleDataTabObj from './kbn_home_sample_data_tab.devdocs.json';
diff --git a/api_docs/kbn_i18n.mdx b/api_docs/kbn_i18n.mdx
index 72cf9a3773f2..0effe0f17756 100644
--- a/api_docs/kbn_i18n.mdx
+++ b/api_docs/kbn_i18n.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-i18n
title: "@kbn/i18n"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/i18n plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/i18n']
---
import kbnI18nObj from './kbn_i18n.devdocs.json';
diff --git a/api_docs/kbn_i18n_react.mdx b/api_docs/kbn_i18n_react.mdx
index e45a4fc98c35..362bce67c2dc 100644
--- a/api_docs/kbn_i18n_react.mdx
+++ b/api_docs/kbn_i18n_react.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-i18n-react
title: "@kbn/i18n-react"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/i18n-react plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/i18n-react']
---
import kbnI18nReactObj from './kbn_i18n_react.devdocs.json';
diff --git a/api_docs/kbn_import_resolver.mdx b/api_docs/kbn_import_resolver.mdx
index e3f7b35a155c..11a0641528b9 100644
--- a/api_docs/kbn_import_resolver.mdx
+++ b/api_docs/kbn_import_resolver.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-import-resolver
title: "@kbn/import-resolver"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/import-resolver plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/import-resolver']
---
import kbnImportResolverObj from './kbn_import_resolver.devdocs.json';
diff --git a/api_docs/kbn_infra_forge.mdx b/api_docs/kbn_infra_forge.mdx
index 0cecb0a4ba5c..8f2571d5dbc8 100644
--- a/api_docs/kbn_infra_forge.mdx
+++ b/api_docs/kbn_infra_forge.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-infra-forge
title: "@kbn/infra-forge"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/infra-forge plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/infra-forge']
---
import kbnInfraForgeObj from './kbn_infra_forge.devdocs.json';
diff --git a/api_docs/kbn_interpreter.mdx b/api_docs/kbn_interpreter.mdx
index 4941f2a1ab15..abf5feccf05e 100644
--- a/api_docs/kbn_interpreter.mdx
+++ b/api_docs/kbn_interpreter.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-interpreter
title: "@kbn/interpreter"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/interpreter plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/interpreter']
---
import kbnInterpreterObj from './kbn_interpreter.devdocs.json';
diff --git a/api_docs/kbn_io_ts_utils.mdx b/api_docs/kbn_io_ts_utils.mdx
index cbb0aff006a7..5f8748ebf7b9 100644
--- a/api_docs/kbn_io_ts_utils.mdx
+++ b/api_docs/kbn_io_ts_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-io-ts-utils
title: "@kbn/io-ts-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/io-ts-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/io-ts-utils']
---
import kbnIoTsUtilsObj from './kbn_io_ts_utils.devdocs.json';
diff --git a/api_docs/kbn_jest_serializers.mdx b/api_docs/kbn_jest_serializers.mdx
index 804d14c91ff2..63e2cf23c46b 100644
--- a/api_docs/kbn_jest_serializers.mdx
+++ b/api_docs/kbn_jest_serializers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-jest-serializers
title: "@kbn/jest-serializers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/jest-serializers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/jest-serializers']
---
import kbnJestSerializersObj from './kbn_jest_serializers.devdocs.json';
diff --git a/api_docs/kbn_journeys.mdx b/api_docs/kbn_journeys.mdx
index 029c5ed97d99..bc89f442e687 100644
--- a/api_docs/kbn_journeys.mdx
+++ b/api_docs/kbn_journeys.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-journeys
title: "@kbn/journeys"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/journeys plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/journeys']
---
import kbnJourneysObj from './kbn_journeys.devdocs.json';
diff --git a/api_docs/kbn_json_ast.mdx b/api_docs/kbn_json_ast.mdx
index ab3fd2f23aa3..a7bf4478b2b7 100644
--- a/api_docs/kbn_json_ast.mdx
+++ b/api_docs/kbn_json_ast.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-json-ast
title: "@kbn/json-ast"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/json-ast plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/json-ast']
---
import kbnJsonAstObj from './kbn_json_ast.devdocs.json';
diff --git a/api_docs/kbn_kibana_manifest_schema.mdx b/api_docs/kbn_kibana_manifest_schema.mdx
index 11a4dd5914b2..f73eb919c2c7 100644
--- a/api_docs/kbn_kibana_manifest_schema.mdx
+++ b/api_docs/kbn_kibana_manifest_schema.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-kibana-manifest-schema
title: "@kbn/kibana-manifest-schema"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/kibana-manifest-schema plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/kibana-manifest-schema']
---
import kbnKibanaManifestSchemaObj from './kbn_kibana_manifest_schema.devdocs.json';
diff --git a/api_docs/kbn_language_documentation_popover.mdx b/api_docs/kbn_language_documentation_popover.mdx
index bf56a7a29e40..72ac4ae1a195 100644
--- a/api_docs/kbn_language_documentation_popover.mdx
+++ b/api_docs/kbn_language_documentation_popover.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-language-documentation-popover
title: "@kbn/language-documentation-popover"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/language-documentation-popover plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/language-documentation-popover']
---
import kbnLanguageDocumentationPopoverObj from './kbn_language_documentation_popover.devdocs.json';
diff --git a/api_docs/kbn_lens_embeddable_utils.mdx b/api_docs/kbn_lens_embeddable_utils.mdx
index b64d28563bf8..c895d02a4a76 100644
--- a/api_docs/kbn_lens_embeddable_utils.mdx
+++ b/api_docs/kbn_lens_embeddable_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-lens-embeddable-utils
title: "@kbn/lens-embeddable-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/lens-embeddable-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/lens-embeddable-utils']
---
import kbnLensEmbeddableUtilsObj from './kbn_lens_embeddable_utils.devdocs.json';
diff --git a/api_docs/kbn_lens_formula_docs.mdx b/api_docs/kbn_lens_formula_docs.mdx
index 89cd7738a9c5..6630a1449c1e 100644
--- a/api_docs/kbn_lens_formula_docs.mdx
+++ b/api_docs/kbn_lens_formula_docs.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-lens-formula-docs
title: "@kbn/lens-formula-docs"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/lens-formula-docs plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/lens-formula-docs']
---
import kbnLensFormulaDocsObj from './kbn_lens_formula_docs.devdocs.json';
diff --git a/api_docs/kbn_logging.mdx b/api_docs/kbn_logging.mdx
index 01540d29df7f..488c1e41d451 100644
--- a/api_docs/kbn_logging.mdx
+++ b/api_docs/kbn_logging.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-logging
title: "@kbn/logging"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/logging plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/logging']
---
import kbnLoggingObj from './kbn_logging.devdocs.json';
diff --git a/api_docs/kbn_logging_mocks.mdx b/api_docs/kbn_logging_mocks.mdx
index 2ce433c5fa27..5ee2d2935d5b 100644
--- a/api_docs/kbn_logging_mocks.mdx
+++ b/api_docs/kbn_logging_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-logging-mocks
title: "@kbn/logging-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/logging-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/logging-mocks']
---
import kbnLoggingMocksObj from './kbn_logging_mocks.devdocs.json';
diff --git a/api_docs/kbn_managed_content_badge.mdx b/api_docs/kbn_managed_content_badge.mdx
index eda7f5479755..0f81e91ee7eb 100644
--- a/api_docs/kbn_managed_content_badge.mdx
+++ b/api_docs/kbn_managed_content_badge.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-managed-content-badge
title: "@kbn/managed-content-badge"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/managed-content-badge plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/managed-content-badge']
---
import kbnManagedContentBadgeObj from './kbn_managed_content_badge.devdocs.json';
diff --git a/api_docs/kbn_managed_vscode_config.mdx b/api_docs/kbn_managed_vscode_config.mdx
index db01da0c3d33..31f13d90693b 100644
--- a/api_docs/kbn_managed_vscode_config.mdx
+++ b/api_docs/kbn_managed_vscode_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-managed-vscode-config
title: "@kbn/managed-vscode-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/managed-vscode-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/managed-vscode-config']
---
import kbnManagedVscodeConfigObj from './kbn_managed_vscode_config.devdocs.json';
diff --git a/api_docs/kbn_management_cards_navigation.mdx b/api_docs/kbn_management_cards_navigation.mdx
index aa6b118d6564..54c08ecb10db 100644
--- a/api_docs/kbn_management_cards_navigation.mdx
+++ b/api_docs/kbn_management_cards_navigation.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-cards-navigation
title: "@kbn/management-cards-navigation"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-cards-navigation plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-cards-navigation']
---
import kbnManagementCardsNavigationObj from './kbn_management_cards_navigation.devdocs.json';
diff --git a/api_docs/kbn_management_settings_application.mdx b/api_docs/kbn_management_settings_application.mdx
index ac8bc393eeee..95e285f4c91d 100644
--- a/api_docs/kbn_management_settings_application.mdx
+++ b/api_docs/kbn_management_settings_application.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-application
title: "@kbn/management-settings-application"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-application plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-application']
---
import kbnManagementSettingsApplicationObj from './kbn_management_settings_application.devdocs.json';
diff --git a/api_docs/kbn_management_settings_components_field_category.mdx b/api_docs/kbn_management_settings_components_field_category.mdx
index f424312a0eec..3ec900b2f2ad 100644
--- a/api_docs/kbn_management_settings_components_field_category.mdx
+++ b/api_docs/kbn_management_settings_components_field_category.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-components-field-category
title: "@kbn/management-settings-components-field-category"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-components-field-category plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-components-field-category']
---
import kbnManagementSettingsComponentsFieldCategoryObj from './kbn_management_settings_components_field_category.devdocs.json';
diff --git a/api_docs/kbn_management_settings_components_field_input.mdx b/api_docs/kbn_management_settings_components_field_input.mdx
index a0899a5dbf5a..d2be72d4ddff 100644
--- a/api_docs/kbn_management_settings_components_field_input.mdx
+++ b/api_docs/kbn_management_settings_components_field_input.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-components-field-input
title: "@kbn/management-settings-components-field-input"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-components-field-input plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-components-field-input']
---
import kbnManagementSettingsComponentsFieldInputObj from './kbn_management_settings_components_field_input.devdocs.json';
diff --git a/api_docs/kbn_management_settings_components_field_row.mdx b/api_docs/kbn_management_settings_components_field_row.mdx
index 3207a2109c77..57e243259667 100644
--- a/api_docs/kbn_management_settings_components_field_row.mdx
+++ b/api_docs/kbn_management_settings_components_field_row.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-components-field-row
title: "@kbn/management-settings-components-field-row"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-components-field-row plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-components-field-row']
---
import kbnManagementSettingsComponentsFieldRowObj from './kbn_management_settings_components_field_row.devdocs.json';
diff --git a/api_docs/kbn_management_settings_components_form.mdx b/api_docs/kbn_management_settings_components_form.mdx
index e703c0cc8bbb..46a52e62af65 100644
--- a/api_docs/kbn_management_settings_components_form.mdx
+++ b/api_docs/kbn_management_settings_components_form.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-components-form
title: "@kbn/management-settings-components-form"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-components-form plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-components-form']
---
import kbnManagementSettingsComponentsFormObj from './kbn_management_settings_components_form.devdocs.json';
diff --git a/api_docs/kbn_management_settings_field_definition.mdx b/api_docs/kbn_management_settings_field_definition.mdx
index 3b414721022d..4426a334d377 100644
--- a/api_docs/kbn_management_settings_field_definition.mdx
+++ b/api_docs/kbn_management_settings_field_definition.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-field-definition
title: "@kbn/management-settings-field-definition"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-field-definition plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-field-definition']
---
import kbnManagementSettingsFieldDefinitionObj from './kbn_management_settings_field_definition.devdocs.json';
diff --git a/api_docs/kbn_management_settings_ids.mdx b/api_docs/kbn_management_settings_ids.mdx
index 7a0c67f2d8d7..ad0b03cda46c 100644
--- a/api_docs/kbn_management_settings_ids.mdx
+++ b/api_docs/kbn_management_settings_ids.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-ids
title: "@kbn/management-settings-ids"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-ids plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-ids']
---
import kbnManagementSettingsIdsObj from './kbn_management_settings_ids.devdocs.json';
diff --git a/api_docs/kbn_management_settings_section_registry.mdx b/api_docs/kbn_management_settings_section_registry.mdx
index ac1a13c4ed07..a12043505af6 100644
--- a/api_docs/kbn_management_settings_section_registry.mdx
+++ b/api_docs/kbn_management_settings_section_registry.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-section-registry
title: "@kbn/management-settings-section-registry"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-section-registry plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-section-registry']
---
import kbnManagementSettingsSectionRegistryObj from './kbn_management_settings_section_registry.devdocs.json';
diff --git a/api_docs/kbn_management_settings_types.mdx b/api_docs/kbn_management_settings_types.mdx
index 6a5d93407de7..a2237eead922 100644
--- a/api_docs/kbn_management_settings_types.mdx
+++ b/api_docs/kbn_management_settings_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-types
title: "@kbn/management-settings-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-types']
---
import kbnManagementSettingsTypesObj from './kbn_management_settings_types.devdocs.json';
diff --git a/api_docs/kbn_management_settings_utilities.mdx b/api_docs/kbn_management_settings_utilities.mdx
index 8d858821e203..530c75799051 100644
--- a/api_docs/kbn_management_settings_utilities.mdx
+++ b/api_docs/kbn_management_settings_utilities.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-settings-utilities
title: "@kbn/management-settings-utilities"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-settings-utilities plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-settings-utilities']
---
import kbnManagementSettingsUtilitiesObj from './kbn_management_settings_utilities.devdocs.json';
diff --git a/api_docs/kbn_management_storybook_config.mdx b/api_docs/kbn_management_storybook_config.mdx
index b9cb128b7812..c312db3f6cdf 100644
--- a/api_docs/kbn_management_storybook_config.mdx
+++ b/api_docs/kbn_management_storybook_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-management-storybook-config
title: "@kbn/management-storybook-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/management-storybook-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/management-storybook-config']
---
import kbnManagementStorybookConfigObj from './kbn_management_storybook_config.devdocs.json';
diff --git a/api_docs/kbn_mapbox_gl.mdx b/api_docs/kbn_mapbox_gl.mdx
index c6d0cec910e3..0ba7f552b995 100644
--- a/api_docs/kbn_mapbox_gl.mdx
+++ b/api_docs/kbn_mapbox_gl.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-mapbox-gl
title: "@kbn/mapbox-gl"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/mapbox-gl plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/mapbox-gl']
---
import kbnMapboxGlObj from './kbn_mapbox_gl.devdocs.json';
diff --git a/api_docs/kbn_maps_vector_tile_utils.mdx b/api_docs/kbn_maps_vector_tile_utils.mdx
index c8c4b16cc138..c69422511bb8 100644
--- a/api_docs/kbn_maps_vector_tile_utils.mdx
+++ b/api_docs/kbn_maps_vector_tile_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-maps-vector-tile-utils
title: "@kbn/maps-vector-tile-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/maps-vector-tile-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/maps-vector-tile-utils']
---
import kbnMapsVectorTileUtilsObj from './kbn_maps_vector_tile_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_agg_utils.mdx b/api_docs/kbn_ml_agg_utils.mdx
index a8d4e4fc4f8d..59c17f0d7be9 100644
--- a/api_docs/kbn_ml_agg_utils.mdx
+++ b/api_docs/kbn_ml_agg_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-agg-utils
title: "@kbn/ml-agg-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-agg-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-agg-utils']
---
import kbnMlAggUtilsObj from './kbn_ml_agg_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_anomaly_utils.mdx b/api_docs/kbn_ml_anomaly_utils.mdx
index 013df9d204e9..09f00029aaa8 100644
--- a/api_docs/kbn_ml_anomaly_utils.mdx
+++ b/api_docs/kbn_ml_anomaly_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-anomaly-utils
title: "@kbn/ml-anomaly-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-anomaly-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-anomaly-utils']
---
import kbnMlAnomalyUtilsObj from './kbn_ml_anomaly_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_cancellable_search.mdx b/api_docs/kbn_ml_cancellable_search.mdx
index 4a0534d1db95..60f280fc97dd 100644
--- a/api_docs/kbn_ml_cancellable_search.mdx
+++ b/api_docs/kbn_ml_cancellable_search.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-cancellable-search
title: "@kbn/ml-cancellable-search"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-cancellable-search plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-cancellable-search']
---
import kbnMlCancellableSearchObj from './kbn_ml_cancellable_search.devdocs.json';
diff --git a/api_docs/kbn_ml_category_validator.mdx b/api_docs/kbn_ml_category_validator.mdx
index 4b1d8642a5b5..9c1801fc2081 100644
--- a/api_docs/kbn_ml_category_validator.mdx
+++ b/api_docs/kbn_ml_category_validator.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-category-validator
title: "@kbn/ml-category-validator"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-category-validator plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-category-validator']
---
import kbnMlCategoryValidatorObj from './kbn_ml_category_validator.devdocs.json';
diff --git a/api_docs/kbn_ml_chi2test.mdx b/api_docs/kbn_ml_chi2test.mdx
index abd7c0e42ab3..27e387538ac5 100644
--- a/api_docs/kbn_ml_chi2test.mdx
+++ b/api_docs/kbn_ml_chi2test.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-chi2test
title: "@kbn/ml-chi2test"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-chi2test plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-chi2test']
---
import kbnMlChi2testObj from './kbn_ml_chi2test.devdocs.json';
diff --git a/api_docs/kbn_ml_data_frame_analytics_utils.mdx b/api_docs/kbn_ml_data_frame_analytics_utils.mdx
index baeb2f8ea1bd..ed33610354b2 100644
--- a/api_docs/kbn_ml_data_frame_analytics_utils.mdx
+++ b/api_docs/kbn_ml_data_frame_analytics_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-data-frame-analytics-utils
title: "@kbn/ml-data-frame-analytics-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-data-frame-analytics-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-data-frame-analytics-utils']
---
import kbnMlDataFrameAnalyticsUtilsObj from './kbn_ml_data_frame_analytics_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_data_grid.mdx b/api_docs/kbn_ml_data_grid.mdx
index 56efb731bc9b..a334b57c9649 100644
--- a/api_docs/kbn_ml_data_grid.mdx
+++ b/api_docs/kbn_ml_data_grid.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-data-grid
title: "@kbn/ml-data-grid"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-data-grid plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-data-grid']
---
import kbnMlDataGridObj from './kbn_ml_data_grid.devdocs.json';
diff --git a/api_docs/kbn_ml_date_picker.mdx b/api_docs/kbn_ml_date_picker.mdx
index 8e0483b25eee..70c5deef2303 100644
--- a/api_docs/kbn_ml_date_picker.mdx
+++ b/api_docs/kbn_ml_date_picker.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-date-picker
title: "@kbn/ml-date-picker"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-date-picker plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-date-picker']
---
import kbnMlDatePickerObj from './kbn_ml_date_picker.devdocs.json';
diff --git a/api_docs/kbn_ml_date_utils.mdx b/api_docs/kbn_ml_date_utils.mdx
index 2255a68e84e1..8de14bf606b0 100644
--- a/api_docs/kbn_ml_date_utils.mdx
+++ b/api_docs/kbn_ml_date_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-date-utils
title: "@kbn/ml-date-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-date-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-date-utils']
---
import kbnMlDateUtilsObj from './kbn_ml_date_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_error_utils.mdx b/api_docs/kbn_ml_error_utils.mdx
index 2eefa9138498..0c1498a11de3 100644
--- a/api_docs/kbn_ml_error_utils.mdx
+++ b/api_docs/kbn_ml_error_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-error-utils
title: "@kbn/ml-error-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-error-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-error-utils']
---
import kbnMlErrorUtilsObj from './kbn_ml_error_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_in_memory_table.mdx b/api_docs/kbn_ml_in_memory_table.mdx
index 0191e12ab998..5f4192d99b70 100644
--- a/api_docs/kbn_ml_in_memory_table.mdx
+++ b/api_docs/kbn_ml_in_memory_table.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-in-memory-table
title: "@kbn/ml-in-memory-table"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-in-memory-table plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-in-memory-table']
---
import kbnMlInMemoryTableObj from './kbn_ml_in_memory_table.devdocs.json';
diff --git a/api_docs/kbn_ml_is_defined.mdx b/api_docs/kbn_ml_is_defined.mdx
index ce95b13f839d..c1f14218a5d4 100644
--- a/api_docs/kbn_ml_is_defined.mdx
+++ b/api_docs/kbn_ml_is_defined.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-is-defined
title: "@kbn/ml-is-defined"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-is-defined plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-is-defined']
---
import kbnMlIsDefinedObj from './kbn_ml_is_defined.devdocs.json';
diff --git a/api_docs/kbn_ml_is_populated_object.mdx b/api_docs/kbn_ml_is_populated_object.mdx
index f5d7e7031882..691b2547591a 100644
--- a/api_docs/kbn_ml_is_populated_object.mdx
+++ b/api_docs/kbn_ml_is_populated_object.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-is-populated-object
title: "@kbn/ml-is-populated-object"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-is-populated-object plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-is-populated-object']
---
import kbnMlIsPopulatedObjectObj from './kbn_ml_is_populated_object.devdocs.json';
diff --git a/api_docs/kbn_ml_kibana_theme.mdx b/api_docs/kbn_ml_kibana_theme.mdx
index 8f2200cd4003..d85286102bcd 100644
--- a/api_docs/kbn_ml_kibana_theme.mdx
+++ b/api_docs/kbn_ml_kibana_theme.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-kibana-theme
title: "@kbn/ml-kibana-theme"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-kibana-theme plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-kibana-theme']
---
import kbnMlKibanaThemeObj from './kbn_ml_kibana_theme.devdocs.json';
diff --git a/api_docs/kbn_ml_local_storage.mdx b/api_docs/kbn_ml_local_storage.mdx
index bcd3868837c8..d25eacbace6c 100644
--- a/api_docs/kbn_ml_local_storage.mdx
+++ b/api_docs/kbn_ml_local_storage.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-local-storage
title: "@kbn/ml-local-storage"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-local-storage plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-local-storage']
---
import kbnMlLocalStorageObj from './kbn_ml_local_storage.devdocs.json';
diff --git a/api_docs/kbn_ml_nested_property.mdx b/api_docs/kbn_ml_nested_property.mdx
index f3063f849182..04e14fe2960f 100644
--- a/api_docs/kbn_ml_nested_property.mdx
+++ b/api_docs/kbn_ml_nested_property.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-nested-property
title: "@kbn/ml-nested-property"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-nested-property plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-nested-property']
---
import kbnMlNestedPropertyObj from './kbn_ml_nested_property.devdocs.json';
diff --git a/api_docs/kbn_ml_number_utils.mdx b/api_docs/kbn_ml_number_utils.mdx
index 531f0a8bbe70..66942b7ce47f 100644
--- a/api_docs/kbn_ml_number_utils.mdx
+++ b/api_docs/kbn_ml_number_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-number-utils
title: "@kbn/ml-number-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-number-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-number-utils']
---
import kbnMlNumberUtilsObj from './kbn_ml_number_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_query_utils.mdx b/api_docs/kbn_ml_query_utils.mdx
index 34920c6604d4..c001c183fe5d 100644
--- a/api_docs/kbn_ml_query_utils.mdx
+++ b/api_docs/kbn_ml_query_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-query-utils
title: "@kbn/ml-query-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-query-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-query-utils']
---
import kbnMlQueryUtilsObj from './kbn_ml_query_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_random_sampler_utils.mdx b/api_docs/kbn_ml_random_sampler_utils.mdx
index 6d601bd97035..ce74fd0e19dc 100644
--- a/api_docs/kbn_ml_random_sampler_utils.mdx
+++ b/api_docs/kbn_ml_random_sampler_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-random-sampler-utils
title: "@kbn/ml-random-sampler-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-random-sampler-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-random-sampler-utils']
---
import kbnMlRandomSamplerUtilsObj from './kbn_ml_random_sampler_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_route_utils.mdx b/api_docs/kbn_ml_route_utils.mdx
index 13a83ec40703..1c059abe7a6c 100644
--- a/api_docs/kbn_ml_route_utils.mdx
+++ b/api_docs/kbn_ml_route_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-route-utils
title: "@kbn/ml-route-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-route-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-route-utils']
---
import kbnMlRouteUtilsObj from './kbn_ml_route_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_runtime_field_utils.mdx b/api_docs/kbn_ml_runtime_field_utils.mdx
index 78d049328810..07c7c44591fc 100644
--- a/api_docs/kbn_ml_runtime_field_utils.mdx
+++ b/api_docs/kbn_ml_runtime_field_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-runtime-field-utils
title: "@kbn/ml-runtime-field-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-runtime-field-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-runtime-field-utils']
---
import kbnMlRuntimeFieldUtilsObj from './kbn_ml_runtime_field_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_string_hash.mdx b/api_docs/kbn_ml_string_hash.mdx
index b143da4542ec..9f11f5aead52 100644
--- a/api_docs/kbn_ml_string_hash.mdx
+++ b/api_docs/kbn_ml_string_hash.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-string-hash
title: "@kbn/ml-string-hash"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-string-hash plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-string-hash']
---
import kbnMlStringHashObj from './kbn_ml_string_hash.devdocs.json';
diff --git a/api_docs/kbn_ml_trained_models_utils.mdx b/api_docs/kbn_ml_trained_models_utils.mdx
index f5b8f4b4ecc2..b916e4595639 100644
--- a/api_docs/kbn_ml_trained_models_utils.mdx
+++ b/api_docs/kbn_ml_trained_models_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-trained-models-utils
title: "@kbn/ml-trained-models-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-trained-models-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-trained-models-utils']
---
import kbnMlTrainedModelsUtilsObj from './kbn_ml_trained_models_utils.devdocs.json';
diff --git a/api_docs/kbn_ml_ui_actions.mdx b/api_docs/kbn_ml_ui_actions.mdx
index 91ca07897e39..f42bc849acd2 100644
--- a/api_docs/kbn_ml_ui_actions.mdx
+++ b/api_docs/kbn_ml_ui_actions.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-ui-actions
title: "@kbn/ml-ui-actions"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-ui-actions plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-ui-actions']
---
import kbnMlUiActionsObj from './kbn_ml_ui_actions.devdocs.json';
diff --git a/api_docs/kbn_ml_url_state.mdx b/api_docs/kbn_ml_url_state.mdx
index 2b67f8714dfe..31a4b221c7c0 100644
--- a/api_docs/kbn_ml_url_state.mdx
+++ b/api_docs/kbn_ml_url_state.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ml-url-state
title: "@kbn/ml-url-state"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ml-url-state plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ml-url-state']
---
import kbnMlUrlStateObj from './kbn_ml_url_state.devdocs.json';
diff --git a/api_docs/kbn_mock_idp_utils.mdx b/api_docs/kbn_mock_idp_utils.mdx
index 807cf331ffd8..feac5d9c8d96 100644
--- a/api_docs/kbn_mock_idp_utils.mdx
+++ b/api_docs/kbn_mock_idp_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-mock-idp-utils
title: "@kbn/mock-idp-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/mock-idp-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/mock-idp-utils']
---
import kbnMockIdpUtilsObj from './kbn_mock_idp_utils.devdocs.json';
diff --git a/api_docs/kbn_monaco.mdx b/api_docs/kbn_monaco.mdx
index 6e593ea67fe0..7ed82452e661 100644
--- a/api_docs/kbn_monaco.mdx
+++ b/api_docs/kbn_monaco.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-monaco
title: "@kbn/monaco"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/monaco plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/monaco']
---
import kbnMonacoObj from './kbn_monaco.devdocs.json';
diff --git a/api_docs/kbn_object_versioning.mdx b/api_docs/kbn_object_versioning.mdx
index 74438269e6e6..090ed72b15b4 100644
--- a/api_docs/kbn_object_versioning.mdx
+++ b/api_docs/kbn_object_versioning.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-object-versioning
title: "@kbn/object-versioning"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/object-versioning plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/object-versioning']
---
import kbnObjectVersioningObj from './kbn_object_versioning.devdocs.json';
diff --git a/api_docs/kbn_observability_alert_details.mdx b/api_docs/kbn_observability_alert_details.mdx
index cb9d81d60b88..72c4aebbda11 100644
--- a/api_docs/kbn_observability_alert_details.mdx
+++ b/api_docs/kbn_observability_alert_details.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-observability-alert-details
title: "@kbn/observability-alert-details"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/observability-alert-details plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/observability-alert-details']
---
import kbnObservabilityAlertDetailsObj from './kbn_observability_alert_details.devdocs.json';
diff --git a/api_docs/kbn_observability_alerting_test_data.mdx b/api_docs/kbn_observability_alerting_test_data.mdx
index 4957a3bf0aee..4dcf3726e736 100644
--- a/api_docs/kbn_observability_alerting_test_data.mdx
+++ b/api_docs/kbn_observability_alerting_test_data.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-observability-alerting-test-data
title: "@kbn/observability-alerting-test-data"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/observability-alerting-test-data plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/observability-alerting-test-data']
---
import kbnObservabilityAlertingTestDataObj from './kbn_observability_alerting_test_data.devdocs.json';
diff --git a/api_docs/kbn_observability_get_padded_alert_time_range_util.mdx b/api_docs/kbn_observability_get_padded_alert_time_range_util.mdx
index 942d9c0c96dd..0650e76dc97a 100644
--- a/api_docs/kbn_observability_get_padded_alert_time_range_util.mdx
+++ b/api_docs/kbn_observability_get_padded_alert_time_range_util.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-observability-get-padded-alert-time-range-util
title: "@kbn/observability-get-padded-alert-time-range-util"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/observability-get-padded-alert-time-range-util plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/observability-get-padded-alert-time-range-util']
---
import kbnObservabilityGetPaddedAlertTimeRangeUtilObj from './kbn_observability_get_padded_alert_time_range_util.devdocs.json';
diff --git a/api_docs/kbn_openapi_bundler.mdx b/api_docs/kbn_openapi_bundler.mdx
index 7432c05b3586..46c177bcc730 100644
--- a/api_docs/kbn_openapi_bundler.mdx
+++ b/api_docs/kbn_openapi_bundler.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-openapi-bundler
title: "@kbn/openapi-bundler"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/openapi-bundler plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/openapi-bundler']
---
import kbnOpenapiBundlerObj from './kbn_openapi_bundler.devdocs.json';
diff --git a/api_docs/kbn_openapi_generator.mdx b/api_docs/kbn_openapi_generator.mdx
index ff240a0b75b6..201666fe8957 100644
--- a/api_docs/kbn_openapi_generator.mdx
+++ b/api_docs/kbn_openapi_generator.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-openapi-generator
title: "@kbn/openapi-generator"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/openapi-generator plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/openapi-generator']
---
import kbnOpenapiGeneratorObj from './kbn_openapi_generator.devdocs.json';
diff --git a/api_docs/kbn_optimizer.mdx b/api_docs/kbn_optimizer.mdx
index 60d68860befc..c75771e2f961 100644
--- a/api_docs/kbn_optimizer.mdx
+++ b/api_docs/kbn_optimizer.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-optimizer
title: "@kbn/optimizer"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/optimizer plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/optimizer']
---
import kbnOptimizerObj from './kbn_optimizer.devdocs.json';
diff --git a/api_docs/kbn_optimizer_webpack_helpers.mdx b/api_docs/kbn_optimizer_webpack_helpers.mdx
index 829da23d563c..80ea29169957 100644
--- a/api_docs/kbn_optimizer_webpack_helpers.mdx
+++ b/api_docs/kbn_optimizer_webpack_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-optimizer-webpack-helpers
title: "@kbn/optimizer-webpack-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/optimizer-webpack-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/optimizer-webpack-helpers']
---
import kbnOptimizerWebpackHelpersObj from './kbn_optimizer_webpack_helpers.devdocs.json';
diff --git a/api_docs/kbn_osquery_io_ts_types.mdx b/api_docs/kbn_osquery_io_ts_types.mdx
index b0f9326b96c4..f67834db7f1a 100644
--- a/api_docs/kbn_osquery_io_ts_types.mdx
+++ b/api_docs/kbn_osquery_io_ts_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-osquery-io-ts-types
title: "@kbn/osquery-io-ts-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/osquery-io-ts-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/osquery-io-ts-types']
---
import kbnOsqueryIoTsTypesObj from './kbn_osquery_io_ts_types.devdocs.json';
diff --git a/api_docs/kbn_panel_loader.mdx b/api_docs/kbn_panel_loader.mdx
index 250ae26d694b..494dd7810c19 100644
--- a/api_docs/kbn_panel_loader.mdx
+++ b/api_docs/kbn_panel_loader.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-panel-loader
title: "@kbn/panel-loader"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/panel-loader plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/panel-loader']
---
import kbnPanelLoaderObj from './kbn_panel_loader.devdocs.json';
diff --git a/api_docs/kbn_performance_testing_dataset_extractor.mdx b/api_docs/kbn_performance_testing_dataset_extractor.mdx
index 7aec2c4be0c7..8f80afe0a9fe 100644
--- a/api_docs/kbn_performance_testing_dataset_extractor.mdx
+++ b/api_docs/kbn_performance_testing_dataset_extractor.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-performance-testing-dataset-extractor
title: "@kbn/performance-testing-dataset-extractor"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/performance-testing-dataset-extractor plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/performance-testing-dataset-extractor']
---
import kbnPerformanceTestingDatasetExtractorObj from './kbn_performance_testing_dataset_extractor.devdocs.json';
diff --git a/api_docs/kbn_plugin_check.mdx b/api_docs/kbn_plugin_check.mdx
index 92bb4f5bd5d1..cd3a903c8e28 100644
--- a/api_docs/kbn_plugin_check.mdx
+++ b/api_docs/kbn_plugin_check.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-plugin-check
title: "@kbn/plugin-check"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/plugin-check plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/plugin-check']
---
import kbnPluginCheckObj from './kbn_plugin_check.devdocs.json';
diff --git a/api_docs/kbn_plugin_generator.mdx b/api_docs/kbn_plugin_generator.mdx
index c3ccfacc67e9..4dfbbb237755 100644
--- a/api_docs/kbn_plugin_generator.mdx
+++ b/api_docs/kbn_plugin_generator.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-plugin-generator
title: "@kbn/plugin-generator"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/plugin-generator plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/plugin-generator']
---
import kbnPluginGeneratorObj from './kbn_plugin_generator.devdocs.json';
diff --git a/api_docs/kbn_plugin_helpers.mdx b/api_docs/kbn_plugin_helpers.mdx
index f0bf0b802af2..ee373fefeb57 100644
--- a/api_docs/kbn_plugin_helpers.mdx
+++ b/api_docs/kbn_plugin_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-plugin-helpers
title: "@kbn/plugin-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/plugin-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/plugin-helpers']
---
import kbnPluginHelpersObj from './kbn_plugin_helpers.devdocs.json';
diff --git a/api_docs/kbn_presentation_containers.mdx b/api_docs/kbn_presentation_containers.mdx
index d1ed8be33352..2b9a3fe121c7 100644
--- a/api_docs/kbn_presentation_containers.mdx
+++ b/api_docs/kbn_presentation_containers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-presentation-containers
title: "@kbn/presentation-containers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/presentation-containers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/presentation-containers']
---
import kbnPresentationContainersObj from './kbn_presentation_containers.devdocs.json';
diff --git a/api_docs/kbn_presentation_library.mdx b/api_docs/kbn_presentation_library.mdx
index 9088a3153af4..665fe39bc4a4 100644
--- a/api_docs/kbn_presentation_library.mdx
+++ b/api_docs/kbn_presentation_library.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-presentation-library
title: "@kbn/presentation-library"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/presentation-library plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/presentation-library']
---
import kbnPresentationLibraryObj from './kbn_presentation_library.devdocs.json';
diff --git a/api_docs/kbn_presentation_publishing.mdx b/api_docs/kbn_presentation_publishing.mdx
index 40d22c8840da..9bf5d3e0d5a5 100644
--- a/api_docs/kbn_presentation_publishing.mdx
+++ b/api_docs/kbn_presentation_publishing.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-presentation-publishing
title: "@kbn/presentation-publishing"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/presentation-publishing plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/presentation-publishing']
---
import kbnPresentationPublishingObj from './kbn_presentation_publishing.devdocs.json';
diff --git a/api_docs/kbn_profiling_utils.mdx b/api_docs/kbn_profiling_utils.mdx
index 0d7a35352399..fb35925cd07c 100644
--- a/api_docs/kbn_profiling_utils.mdx
+++ b/api_docs/kbn_profiling_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-profiling-utils
title: "@kbn/profiling-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/profiling-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/profiling-utils']
---
import kbnProfilingUtilsObj from './kbn_profiling_utils.devdocs.json';
diff --git a/api_docs/kbn_random_sampling.mdx b/api_docs/kbn_random_sampling.mdx
index 00e9d7fb0298..083fe563ec35 100644
--- a/api_docs/kbn_random_sampling.mdx
+++ b/api_docs/kbn_random_sampling.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-random-sampling
title: "@kbn/random-sampling"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/random-sampling plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/random-sampling']
---
import kbnRandomSamplingObj from './kbn_random_sampling.devdocs.json';
diff --git a/api_docs/kbn_react_field.mdx b/api_docs/kbn_react_field.mdx
index 6eada1a6c780..59ca9a89db8a 100644
--- a/api_docs/kbn_react_field.mdx
+++ b/api_docs/kbn_react_field.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-field
title: "@kbn/react-field"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-field plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-field']
---
import kbnReactFieldObj from './kbn_react_field.devdocs.json';
diff --git a/api_docs/kbn_react_kibana_context_common.mdx b/api_docs/kbn_react_kibana_context_common.mdx
index adc913271d11..323746aa7a3b 100644
--- a/api_docs/kbn_react_kibana_context_common.mdx
+++ b/api_docs/kbn_react_kibana_context_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-kibana-context-common
title: "@kbn/react-kibana-context-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-kibana-context-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-kibana-context-common']
---
import kbnReactKibanaContextCommonObj from './kbn_react_kibana_context_common.devdocs.json';
diff --git a/api_docs/kbn_react_kibana_context_render.mdx b/api_docs/kbn_react_kibana_context_render.mdx
index e2af48ca3a4a..7aebb3c98db9 100644
--- a/api_docs/kbn_react_kibana_context_render.mdx
+++ b/api_docs/kbn_react_kibana_context_render.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-kibana-context-render
title: "@kbn/react-kibana-context-render"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-kibana-context-render plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-kibana-context-render']
---
import kbnReactKibanaContextRenderObj from './kbn_react_kibana_context_render.devdocs.json';
diff --git a/api_docs/kbn_react_kibana_context_root.mdx b/api_docs/kbn_react_kibana_context_root.mdx
index e0127ce1b70b..905960f3b3ec 100644
--- a/api_docs/kbn_react_kibana_context_root.mdx
+++ b/api_docs/kbn_react_kibana_context_root.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-kibana-context-root
title: "@kbn/react-kibana-context-root"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-kibana-context-root plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-kibana-context-root']
---
import kbnReactKibanaContextRootObj from './kbn_react_kibana_context_root.devdocs.json';
diff --git a/api_docs/kbn_react_kibana_context_styled.mdx b/api_docs/kbn_react_kibana_context_styled.mdx
index ffcd7eb86947..59355e63aa3d 100644
--- a/api_docs/kbn_react_kibana_context_styled.mdx
+++ b/api_docs/kbn_react_kibana_context_styled.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-kibana-context-styled
title: "@kbn/react-kibana-context-styled"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-kibana-context-styled plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-kibana-context-styled']
---
import kbnReactKibanaContextStyledObj from './kbn_react_kibana_context_styled.devdocs.json';
diff --git a/api_docs/kbn_react_kibana_context_theme.mdx b/api_docs/kbn_react_kibana_context_theme.mdx
index 1b0f5224c57d..1d450a5f0dac 100644
--- a/api_docs/kbn_react_kibana_context_theme.mdx
+++ b/api_docs/kbn_react_kibana_context_theme.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-kibana-context-theme
title: "@kbn/react-kibana-context-theme"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-kibana-context-theme plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-kibana-context-theme']
---
import kbnReactKibanaContextThemeObj from './kbn_react_kibana_context_theme.devdocs.json';
diff --git a/api_docs/kbn_react_kibana_mount.mdx b/api_docs/kbn_react_kibana_mount.mdx
index a149737b11ce..54794d809d98 100644
--- a/api_docs/kbn_react_kibana_mount.mdx
+++ b/api_docs/kbn_react_kibana_mount.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-react-kibana-mount
title: "@kbn/react-kibana-mount"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/react-kibana-mount plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/react-kibana-mount']
---
import kbnReactKibanaMountObj from './kbn_react_kibana_mount.devdocs.json';
diff --git a/api_docs/kbn_repo_file_maps.mdx b/api_docs/kbn_repo_file_maps.mdx
index 57860103a906..68d9b1bb9610 100644
--- a/api_docs/kbn_repo_file_maps.mdx
+++ b/api_docs/kbn_repo_file_maps.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-repo-file-maps
title: "@kbn/repo-file-maps"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/repo-file-maps plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/repo-file-maps']
---
import kbnRepoFileMapsObj from './kbn_repo_file_maps.devdocs.json';
diff --git a/api_docs/kbn_repo_linter.mdx b/api_docs/kbn_repo_linter.mdx
index d19df722804b..8c54ec709aaf 100644
--- a/api_docs/kbn_repo_linter.mdx
+++ b/api_docs/kbn_repo_linter.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-repo-linter
title: "@kbn/repo-linter"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/repo-linter plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/repo-linter']
---
import kbnRepoLinterObj from './kbn_repo_linter.devdocs.json';
diff --git a/api_docs/kbn_repo_path.mdx b/api_docs/kbn_repo_path.mdx
index 83b5bcc2e94d..7c7998a4d193 100644
--- a/api_docs/kbn_repo_path.mdx
+++ b/api_docs/kbn_repo_path.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-repo-path
title: "@kbn/repo-path"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/repo-path plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/repo-path']
---
import kbnRepoPathObj from './kbn_repo_path.devdocs.json';
diff --git a/api_docs/kbn_repo_source_classifier.mdx b/api_docs/kbn_repo_source_classifier.mdx
index f05594f8e34b..8f59c91d2bee 100644
--- a/api_docs/kbn_repo_source_classifier.mdx
+++ b/api_docs/kbn_repo_source_classifier.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-repo-source-classifier
title: "@kbn/repo-source-classifier"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/repo-source-classifier plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/repo-source-classifier']
---
import kbnRepoSourceClassifierObj from './kbn_repo_source_classifier.devdocs.json';
diff --git a/api_docs/kbn_reporting_common.mdx b/api_docs/kbn_reporting_common.mdx
index 11372721b7c6..2874b16b34a9 100644
--- a/api_docs/kbn_reporting_common.mdx
+++ b/api_docs/kbn_reporting_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-common
title: "@kbn/reporting-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-common']
---
import kbnReportingCommonObj from './kbn_reporting_common.devdocs.json';
diff --git a/api_docs/kbn_reporting_export_types_csv.mdx b/api_docs/kbn_reporting_export_types_csv.mdx
index 01e3eee2b218..b4a5acb4c8ff 100644
--- a/api_docs/kbn_reporting_export_types_csv.mdx
+++ b/api_docs/kbn_reporting_export_types_csv.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-export-types-csv
title: "@kbn/reporting-export-types-csv"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-export-types-csv plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-export-types-csv']
---
import kbnReportingExportTypesCsvObj from './kbn_reporting_export_types_csv.devdocs.json';
diff --git a/api_docs/kbn_reporting_export_types_csv_common.mdx b/api_docs/kbn_reporting_export_types_csv_common.mdx
index 366a8c2e61bf..b0ce0cef95f0 100644
--- a/api_docs/kbn_reporting_export_types_csv_common.mdx
+++ b/api_docs/kbn_reporting_export_types_csv_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-export-types-csv-common
title: "@kbn/reporting-export-types-csv-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-export-types-csv-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-export-types-csv-common']
---
import kbnReportingExportTypesCsvCommonObj from './kbn_reporting_export_types_csv_common.devdocs.json';
diff --git a/api_docs/kbn_reporting_export_types_pdf.mdx b/api_docs/kbn_reporting_export_types_pdf.mdx
index 528ec491f536..f0650f1e4b3a 100644
--- a/api_docs/kbn_reporting_export_types_pdf.mdx
+++ b/api_docs/kbn_reporting_export_types_pdf.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-export-types-pdf
title: "@kbn/reporting-export-types-pdf"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-export-types-pdf plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-export-types-pdf']
---
import kbnReportingExportTypesPdfObj from './kbn_reporting_export_types_pdf.devdocs.json';
diff --git a/api_docs/kbn_reporting_export_types_pdf_common.mdx b/api_docs/kbn_reporting_export_types_pdf_common.mdx
index 3b0cc4da17ed..5fd0019dbe26 100644
--- a/api_docs/kbn_reporting_export_types_pdf_common.mdx
+++ b/api_docs/kbn_reporting_export_types_pdf_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-export-types-pdf-common
title: "@kbn/reporting-export-types-pdf-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-export-types-pdf-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-export-types-pdf-common']
---
import kbnReportingExportTypesPdfCommonObj from './kbn_reporting_export_types_pdf_common.devdocs.json';
diff --git a/api_docs/kbn_reporting_export_types_png.mdx b/api_docs/kbn_reporting_export_types_png.mdx
index 6a283c0e2e2f..a552225fb78a 100644
--- a/api_docs/kbn_reporting_export_types_png.mdx
+++ b/api_docs/kbn_reporting_export_types_png.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-export-types-png
title: "@kbn/reporting-export-types-png"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-export-types-png plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-export-types-png']
---
import kbnReportingExportTypesPngObj from './kbn_reporting_export_types_png.devdocs.json';
diff --git a/api_docs/kbn_reporting_export_types_png_common.mdx b/api_docs/kbn_reporting_export_types_png_common.mdx
index 41c9a9ea19eb..7be0b0edf40a 100644
--- a/api_docs/kbn_reporting_export_types_png_common.mdx
+++ b/api_docs/kbn_reporting_export_types_png_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-export-types-png-common
title: "@kbn/reporting-export-types-png-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-export-types-png-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-export-types-png-common']
---
import kbnReportingExportTypesPngCommonObj from './kbn_reporting_export_types_png_common.devdocs.json';
diff --git a/api_docs/kbn_reporting_mocks_server.mdx b/api_docs/kbn_reporting_mocks_server.mdx
index 0214e12a8c08..b27b1bdbf164 100644
--- a/api_docs/kbn_reporting_mocks_server.mdx
+++ b/api_docs/kbn_reporting_mocks_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-mocks-server
title: "@kbn/reporting-mocks-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-mocks-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-mocks-server']
---
import kbnReportingMocksServerObj from './kbn_reporting_mocks_server.devdocs.json';
diff --git a/api_docs/kbn_reporting_public.mdx b/api_docs/kbn_reporting_public.mdx
index d98a341a94eb..857e36945068 100644
--- a/api_docs/kbn_reporting_public.mdx
+++ b/api_docs/kbn_reporting_public.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-public
title: "@kbn/reporting-public"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-public plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-public']
---
import kbnReportingPublicObj from './kbn_reporting_public.devdocs.json';
diff --git a/api_docs/kbn_reporting_server.mdx b/api_docs/kbn_reporting_server.mdx
index 96d60ea1f1bb..38593904f32b 100644
--- a/api_docs/kbn_reporting_server.mdx
+++ b/api_docs/kbn_reporting_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-reporting-server
title: "@kbn/reporting-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/reporting-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/reporting-server']
---
import kbnReportingServerObj from './kbn_reporting_server.devdocs.json';
diff --git a/api_docs/kbn_resizable_layout.mdx b/api_docs/kbn_resizable_layout.mdx
index e4a4b6e7f8ef..73a8e2daf930 100644
--- a/api_docs/kbn_resizable_layout.mdx
+++ b/api_docs/kbn_resizable_layout.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-resizable-layout
title: "@kbn/resizable-layout"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/resizable-layout plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/resizable-layout']
---
import kbnResizableLayoutObj from './kbn_resizable_layout.devdocs.json';
diff --git a/api_docs/kbn_rison.mdx b/api_docs/kbn_rison.mdx
index 331e4f8c9e73..a979c48d33c2 100644
--- a/api_docs/kbn_rison.mdx
+++ b/api_docs/kbn_rison.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-rison
title: "@kbn/rison"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/rison plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/rison']
---
import kbnRisonObj from './kbn_rison.devdocs.json';
diff --git a/api_docs/kbn_router_utils.mdx b/api_docs/kbn_router_utils.mdx
index 04b4e4fdb199..5b6d9a0bf18d 100644
--- a/api_docs/kbn_router_utils.mdx
+++ b/api_docs/kbn_router_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-router-utils
title: "@kbn/router-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/router-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/router-utils']
---
import kbnRouterUtilsObj from './kbn_router_utils.devdocs.json';
diff --git a/api_docs/kbn_rrule.mdx b/api_docs/kbn_rrule.mdx
index 00438a250cb2..9cf911201e72 100644
--- a/api_docs/kbn_rrule.mdx
+++ b/api_docs/kbn_rrule.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-rrule
title: "@kbn/rrule"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/rrule plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/rrule']
---
import kbnRruleObj from './kbn_rrule.devdocs.json';
diff --git a/api_docs/kbn_rule_data_utils.devdocs.json b/api_docs/kbn_rule_data_utils.devdocs.json
index ca4462ca88b0..80797716b4af 100644
--- a/api_docs/kbn_rule_data_utils.devdocs.json
+++ b/api_docs/kbn_rule_data_utils.devdocs.json
@@ -236,6 +236,21 @@
"trackAdoption": false,
"initialIsOpen": false
},
+ {
+ "parentPluginId": "@kbn/rule-data-utils",
+ "id": "def-common.ALERT_CONSECUTIVE_MATCHES",
+ "type": "string",
+ "tags": [],
+ "label": "ALERT_CONSECUTIVE_MATCHES",
+ "description": [],
+ "signature": [
+ "\"kibana.alert.consecutive_matches\""
+ ],
+ "path": "packages/kbn-rule-data-utils/src/default_alerts_as_data.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "@kbn/rule-data-utils",
"id": "def-common.ALERT_CONTEXT",
@@ -1504,7 +1519,7 @@
"label": "DefaultAlertFieldName",
"description": [],
"signature": [
- "\"@timestamp\" | \"kibana\" | \"kibana.alert.rule.rule_type_id\" | \"kibana.alert.rule.consumer\" | \"kibana.alert.rule.execution.uuid\" | \"kibana.alert.instance.id\" | \"kibana.alert.rule.category\" | \"kibana.alert.rule.name\" | \"kibana.alert.rule.producer\" | \"kibana.alert.rule.revision\" | \"kibana.alert.rule.uuid\" | \"kibana.alert.status\" | \"kibana.alert.uuid\" | \"kibana.space_ids\" | \"kibana.alert.action_group\" | \"kibana.alert.case_ids\" | \"kibana.alert.duration.us\" | \"kibana.alert.end\" | \"kibana.alert.flapping\" | \"kibana.alert.flapping_history\" | \"kibana.alert.last_detected\" | \"kibana.alert.maintenance_window_ids\" | \"kibana.alert.reason\" | \"kibana.alert.rule.parameters\" | \"kibana.alert.rule.tags\" | \"kibana.alert.start\" | \"kibana.alert.time_range\" | \"kibana.alert.url\" | \"kibana.alert.workflow_assignee_ids\" | \"kibana.alert.workflow_status\" | \"kibana.alert.workflow_tags\" | \"kibana.version\" | \"kibana.alert\" | \"kibana.alert.rule\""
+ "\"@timestamp\" | \"kibana\" | \"kibana.alert.rule.rule_type_id\" | \"kibana.alert.rule.consumer\" | \"kibana.alert.rule.execution.uuid\" | \"kibana.alert.instance.id\" | \"kibana.alert.rule.category\" | \"kibana.alert.rule.name\" | \"kibana.alert.rule.producer\" | \"kibana.alert.rule.revision\" | \"kibana.alert.rule.uuid\" | \"kibana.alert.status\" | \"kibana.alert.uuid\" | \"kibana.space_ids\" | \"kibana.alert.action_group\" | \"kibana.alert.case_ids\" | \"kibana.alert.consecutive_matches\" | \"kibana.alert.duration.us\" | \"kibana.alert.end\" | \"kibana.alert.flapping\" | \"kibana.alert.flapping_history\" | \"kibana.alert.last_detected\" | \"kibana.alert.maintenance_window_ids\" | \"kibana.alert.reason\" | \"kibana.alert.rule.parameters\" | \"kibana.alert.rule.tags\" | \"kibana.alert.start\" | \"kibana.alert.time_range\" | \"kibana.alert.url\" | \"kibana.alert.workflow_assignee_ids\" | \"kibana.alert.workflow_status\" | \"kibana.alert.workflow_tags\" | \"kibana.version\" | \"kibana.alert\" | \"kibana.alert.rule\""
],
"path": "packages/kbn-rule-data-utils/src/default_alerts_as_data.ts",
"deprecated": false,
diff --git a/api_docs/kbn_rule_data_utils.mdx b/api_docs/kbn_rule_data_utils.mdx
index 91025a67e334..4e76617f7cf4 100644
--- a/api_docs/kbn_rule_data_utils.mdx
+++ b/api_docs/kbn_rule_data_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-rule-data-utils
title: "@kbn/rule-data-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/rule-data-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/rule-data-utils']
---
import kbnRuleDataUtilsObj from './kbn_rule_data_utils.devdocs.json';
@@ -21,7 +21,7 @@ Contact [@elastic/security-detections-response](https://github.com/orgs/elastic/
| Public API count | Any count | Items lacking comments | Missing exports |
|-------------------|-----------|------------------------|-----------------|
-| 122 | 0 | 119 | 0 |
+| 123 | 0 | 120 | 0 |
## Common
diff --git a/api_docs/kbn_saved_objects_settings.mdx b/api_docs/kbn_saved_objects_settings.mdx
index 793072d61aed..86d8a2dbc8c5 100644
--- a/api_docs/kbn_saved_objects_settings.mdx
+++ b/api_docs/kbn_saved_objects_settings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-saved-objects-settings
title: "@kbn/saved-objects-settings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/saved-objects-settings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/saved-objects-settings']
---
import kbnSavedObjectsSettingsObj from './kbn_saved_objects_settings.devdocs.json';
diff --git a/api_docs/kbn_search_api_panels.mdx b/api_docs/kbn_search_api_panels.mdx
index 0a16bc8723da..e5732f5fc99a 100644
--- a/api_docs/kbn_search_api_panels.mdx
+++ b/api_docs/kbn_search_api_panels.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-search-api-panels
title: "@kbn/search-api-panels"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/search-api-panels plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/search-api-panels']
---
import kbnSearchApiPanelsObj from './kbn_search_api_panels.devdocs.json';
diff --git a/api_docs/kbn_search_connectors.mdx b/api_docs/kbn_search_connectors.mdx
index 3590ed04a274..03e1db832d8c 100644
--- a/api_docs/kbn_search_connectors.mdx
+++ b/api_docs/kbn_search_connectors.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-search-connectors
title: "@kbn/search-connectors"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/search-connectors plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/search-connectors']
---
import kbnSearchConnectorsObj from './kbn_search_connectors.devdocs.json';
diff --git a/api_docs/kbn_search_errors.mdx b/api_docs/kbn_search_errors.mdx
index 2634afba1f35..6843143781e9 100644
--- a/api_docs/kbn_search_errors.mdx
+++ b/api_docs/kbn_search_errors.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-search-errors
title: "@kbn/search-errors"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/search-errors plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/search-errors']
---
import kbnSearchErrorsObj from './kbn_search_errors.devdocs.json';
diff --git a/api_docs/kbn_search_index_documents.mdx b/api_docs/kbn_search_index_documents.mdx
index 3354cb16fb6a..64dc9e172fb4 100644
--- a/api_docs/kbn_search_index_documents.mdx
+++ b/api_docs/kbn_search_index_documents.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-search-index-documents
title: "@kbn/search-index-documents"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/search-index-documents plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/search-index-documents']
---
import kbnSearchIndexDocumentsObj from './kbn_search_index_documents.devdocs.json';
diff --git a/api_docs/kbn_search_response_warnings.mdx b/api_docs/kbn_search_response_warnings.mdx
index 27c569631002..4756952a3b1b 100644
--- a/api_docs/kbn_search_response_warnings.mdx
+++ b/api_docs/kbn_search_response_warnings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-search-response-warnings
title: "@kbn/search-response-warnings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/search-response-warnings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/search-response-warnings']
---
import kbnSearchResponseWarningsObj from './kbn_search_response_warnings.devdocs.json';
diff --git a/api_docs/kbn_security_hardening.mdx b/api_docs/kbn_security_hardening.mdx
index 47a5f54671c7..aebef03f4dc6 100644
--- a/api_docs/kbn_security_hardening.mdx
+++ b/api_docs/kbn_security_hardening.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-hardening
title: "@kbn/security-hardening"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-hardening plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-hardening']
---
import kbnSecurityHardeningObj from './kbn_security_hardening.devdocs.json';
diff --git a/api_docs/kbn_security_plugin_types_common.mdx b/api_docs/kbn_security_plugin_types_common.mdx
index 215f7de97e86..77d5c5d73d06 100644
--- a/api_docs/kbn_security_plugin_types_common.mdx
+++ b/api_docs/kbn_security_plugin_types_common.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-plugin-types-common
title: "@kbn/security-plugin-types-common"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-plugin-types-common plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-plugin-types-common']
---
import kbnSecurityPluginTypesCommonObj from './kbn_security_plugin_types_common.devdocs.json';
diff --git a/api_docs/kbn_security_plugin_types_public.mdx b/api_docs/kbn_security_plugin_types_public.mdx
index 679d0b195254..2b485cd9901d 100644
--- a/api_docs/kbn_security_plugin_types_public.mdx
+++ b/api_docs/kbn_security_plugin_types_public.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-plugin-types-public
title: "@kbn/security-plugin-types-public"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-plugin-types-public plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-plugin-types-public']
---
import kbnSecurityPluginTypesPublicObj from './kbn_security_plugin_types_public.devdocs.json';
diff --git a/api_docs/kbn_security_plugin_types_server.mdx b/api_docs/kbn_security_plugin_types_server.mdx
index b2ca1f11d697..ee147cd87790 100644
--- a/api_docs/kbn_security_plugin_types_server.mdx
+++ b/api_docs/kbn_security_plugin_types_server.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-plugin-types-server
title: "@kbn/security-plugin-types-server"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-plugin-types-server plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-plugin-types-server']
---
import kbnSecurityPluginTypesServerObj from './kbn_security_plugin_types_server.devdocs.json';
diff --git a/api_docs/kbn_security_solution_features.mdx b/api_docs/kbn_security_solution_features.mdx
index 17b0a582337d..ed49be768dfe 100644
--- a/api_docs/kbn_security_solution_features.mdx
+++ b/api_docs/kbn_security_solution_features.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-solution-features
title: "@kbn/security-solution-features"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-solution-features plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-solution-features']
---
import kbnSecuritySolutionFeaturesObj from './kbn_security_solution_features.devdocs.json';
diff --git a/api_docs/kbn_security_solution_navigation.mdx b/api_docs/kbn_security_solution_navigation.mdx
index af3058cf3852..ac9a2cda0730 100644
--- a/api_docs/kbn_security_solution_navigation.mdx
+++ b/api_docs/kbn_security_solution_navigation.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-solution-navigation
title: "@kbn/security-solution-navigation"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-solution-navigation plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-solution-navigation']
---
import kbnSecuritySolutionNavigationObj from './kbn_security_solution_navigation.devdocs.json';
diff --git a/api_docs/kbn_security_solution_side_nav.mdx b/api_docs/kbn_security_solution_side_nav.mdx
index 6dfe5ce9a9a5..55566ea00d3e 100644
--- a/api_docs/kbn_security_solution_side_nav.mdx
+++ b/api_docs/kbn_security_solution_side_nav.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-solution-side-nav
title: "@kbn/security-solution-side-nav"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-solution-side-nav plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-solution-side-nav']
---
import kbnSecuritySolutionSideNavObj from './kbn_security_solution_side_nav.devdocs.json';
diff --git a/api_docs/kbn_security_solution_storybook_config.mdx b/api_docs/kbn_security_solution_storybook_config.mdx
index 14a0e3abe0b8..85c08ce5670b 100644
--- a/api_docs/kbn_security_solution_storybook_config.mdx
+++ b/api_docs/kbn_security_solution_storybook_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-security-solution-storybook-config
title: "@kbn/security-solution-storybook-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/security-solution-storybook-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/security-solution-storybook-config']
---
import kbnSecuritySolutionStorybookConfigObj from './kbn_security_solution_storybook_config.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_autocomplete.mdx b/api_docs/kbn_securitysolution_autocomplete.mdx
index c7e96e7bdd78..e3789e50ce70 100644
--- a/api_docs/kbn_securitysolution_autocomplete.mdx
+++ b/api_docs/kbn_securitysolution_autocomplete.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-autocomplete
title: "@kbn/securitysolution-autocomplete"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-autocomplete plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-autocomplete']
---
import kbnSecuritysolutionAutocompleteObj from './kbn_securitysolution_autocomplete.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_data_table.mdx b/api_docs/kbn_securitysolution_data_table.mdx
index 9706790288c3..d03c94ca29cc 100644
--- a/api_docs/kbn_securitysolution_data_table.mdx
+++ b/api_docs/kbn_securitysolution_data_table.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-data-table
title: "@kbn/securitysolution-data-table"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-data-table plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-data-table']
---
import kbnSecuritysolutionDataTableObj from './kbn_securitysolution_data_table.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_ecs.mdx b/api_docs/kbn_securitysolution_ecs.mdx
index b3903783c4e5..aa8bf0ed44bf 100644
--- a/api_docs/kbn_securitysolution_ecs.mdx
+++ b/api_docs/kbn_securitysolution_ecs.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-ecs
title: "@kbn/securitysolution-ecs"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-ecs plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-ecs']
---
import kbnSecuritysolutionEcsObj from './kbn_securitysolution_ecs.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_es_utils.mdx b/api_docs/kbn_securitysolution_es_utils.mdx
index 26e4cb8d2aa4..39c7994743e1 100644
--- a/api_docs/kbn_securitysolution_es_utils.mdx
+++ b/api_docs/kbn_securitysolution_es_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-es-utils
title: "@kbn/securitysolution-es-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-es-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-es-utils']
---
import kbnSecuritysolutionEsUtilsObj from './kbn_securitysolution_es_utils.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_exception_list_components.mdx b/api_docs/kbn_securitysolution_exception_list_components.mdx
index 505a42abb8d2..ce23f2c135bc 100644
--- a/api_docs/kbn_securitysolution_exception_list_components.mdx
+++ b/api_docs/kbn_securitysolution_exception_list_components.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-exception-list-components
title: "@kbn/securitysolution-exception-list-components"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-exception-list-components plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-exception-list-components']
---
import kbnSecuritysolutionExceptionListComponentsObj from './kbn_securitysolution_exception_list_components.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_grouping.mdx b/api_docs/kbn_securitysolution_grouping.mdx
index 3c71da092f00..8ff134088974 100644
--- a/api_docs/kbn_securitysolution_grouping.mdx
+++ b/api_docs/kbn_securitysolution_grouping.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-grouping
title: "@kbn/securitysolution-grouping"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-grouping plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-grouping']
---
import kbnSecuritysolutionGroupingObj from './kbn_securitysolution_grouping.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_hook_utils.mdx b/api_docs/kbn_securitysolution_hook_utils.mdx
index 03a3c3748640..208d481fdafa 100644
--- a/api_docs/kbn_securitysolution_hook_utils.mdx
+++ b/api_docs/kbn_securitysolution_hook_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-hook-utils
title: "@kbn/securitysolution-hook-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-hook-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-hook-utils']
---
import kbnSecuritysolutionHookUtilsObj from './kbn_securitysolution_hook_utils.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_io_ts_alerting_types.mdx b/api_docs/kbn_securitysolution_io_ts_alerting_types.mdx
index 9c321d0700c2..32bb2a38b186 100644
--- a/api_docs/kbn_securitysolution_io_ts_alerting_types.mdx
+++ b/api_docs/kbn_securitysolution_io_ts_alerting_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-io-ts-alerting-types
title: "@kbn/securitysolution-io-ts-alerting-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-io-ts-alerting-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-io-ts-alerting-types']
---
import kbnSecuritysolutionIoTsAlertingTypesObj from './kbn_securitysolution_io_ts_alerting_types.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_io_ts_list_types.mdx b/api_docs/kbn_securitysolution_io_ts_list_types.mdx
index 8af670531d47..320f012372f5 100644
--- a/api_docs/kbn_securitysolution_io_ts_list_types.mdx
+++ b/api_docs/kbn_securitysolution_io_ts_list_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-io-ts-list-types
title: "@kbn/securitysolution-io-ts-list-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-io-ts-list-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-io-ts-list-types']
---
import kbnSecuritysolutionIoTsListTypesObj from './kbn_securitysolution_io_ts_list_types.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_io_ts_types.mdx b/api_docs/kbn_securitysolution_io_ts_types.mdx
index 1eb2091fa58f..fe311ec83305 100644
--- a/api_docs/kbn_securitysolution_io_ts_types.mdx
+++ b/api_docs/kbn_securitysolution_io_ts_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-io-ts-types
title: "@kbn/securitysolution-io-ts-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-io-ts-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-io-ts-types']
---
import kbnSecuritysolutionIoTsTypesObj from './kbn_securitysolution_io_ts_types.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_io_ts_utils.mdx b/api_docs/kbn_securitysolution_io_ts_utils.mdx
index 73a0016cb21d..0699d77adae3 100644
--- a/api_docs/kbn_securitysolution_io_ts_utils.mdx
+++ b/api_docs/kbn_securitysolution_io_ts_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-io-ts-utils
title: "@kbn/securitysolution-io-ts-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-io-ts-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-io-ts-utils']
---
import kbnSecuritysolutionIoTsUtilsObj from './kbn_securitysolution_io_ts_utils.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_list_api.mdx b/api_docs/kbn_securitysolution_list_api.mdx
index cd283112d5db..d1529ad7e646 100644
--- a/api_docs/kbn_securitysolution_list_api.mdx
+++ b/api_docs/kbn_securitysolution_list_api.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-list-api
title: "@kbn/securitysolution-list-api"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-list-api plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-list-api']
---
import kbnSecuritysolutionListApiObj from './kbn_securitysolution_list_api.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_list_constants.mdx b/api_docs/kbn_securitysolution_list_constants.mdx
index 83af7e8bcf31..413c693215cd 100644
--- a/api_docs/kbn_securitysolution_list_constants.mdx
+++ b/api_docs/kbn_securitysolution_list_constants.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-list-constants
title: "@kbn/securitysolution-list-constants"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-list-constants plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-list-constants']
---
import kbnSecuritysolutionListConstantsObj from './kbn_securitysolution_list_constants.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_list_hooks.mdx b/api_docs/kbn_securitysolution_list_hooks.mdx
index 5afecd4c88de..048e0042e272 100644
--- a/api_docs/kbn_securitysolution_list_hooks.mdx
+++ b/api_docs/kbn_securitysolution_list_hooks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-list-hooks
title: "@kbn/securitysolution-list-hooks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-list-hooks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-list-hooks']
---
import kbnSecuritysolutionListHooksObj from './kbn_securitysolution_list_hooks.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_list_utils.mdx b/api_docs/kbn_securitysolution_list_utils.mdx
index 47f96d667e7f..0eeba9dbb316 100644
--- a/api_docs/kbn_securitysolution_list_utils.mdx
+++ b/api_docs/kbn_securitysolution_list_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-list-utils
title: "@kbn/securitysolution-list-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-list-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-list-utils']
---
import kbnSecuritysolutionListUtilsObj from './kbn_securitysolution_list_utils.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_rules.mdx b/api_docs/kbn_securitysolution_rules.mdx
index f23fd5e08b0a..0c0963e8eddb 100644
--- a/api_docs/kbn_securitysolution_rules.mdx
+++ b/api_docs/kbn_securitysolution_rules.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-rules
title: "@kbn/securitysolution-rules"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-rules plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-rules']
---
import kbnSecuritysolutionRulesObj from './kbn_securitysolution_rules.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_t_grid.mdx b/api_docs/kbn_securitysolution_t_grid.mdx
index 6e129a97f0c4..1e0dae77eb23 100644
--- a/api_docs/kbn_securitysolution_t_grid.mdx
+++ b/api_docs/kbn_securitysolution_t_grid.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-t-grid
title: "@kbn/securitysolution-t-grid"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-t-grid plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-t-grid']
---
import kbnSecuritysolutionTGridObj from './kbn_securitysolution_t_grid.devdocs.json';
diff --git a/api_docs/kbn_securitysolution_utils.mdx b/api_docs/kbn_securitysolution_utils.mdx
index 42950362027b..81cd04a46fb1 100644
--- a/api_docs/kbn_securitysolution_utils.mdx
+++ b/api_docs/kbn_securitysolution_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-securitysolution-utils
title: "@kbn/securitysolution-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/securitysolution-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/securitysolution-utils']
---
import kbnSecuritysolutionUtilsObj from './kbn_securitysolution_utils.devdocs.json';
diff --git a/api_docs/kbn_server_http_tools.mdx b/api_docs/kbn_server_http_tools.mdx
index 3c97ad9495de..927089fe4d8e 100644
--- a/api_docs/kbn_server_http_tools.mdx
+++ b/api_docs/kbn_server_http_tools.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-server-http-tools
title: "@kbn/server-http-tools"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/server-http-tools plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/server-http-tools']
---
import kbnServerHttpToolsObj from './kbn_server_http_tools.devdocs.json';
diff --git a/api_docs/kbn_server_route_repository.mdx b/api_docs/kbn_server_route_repository.mdx
index edde02665895..90a057f5b75a 100644
--- a/api_docs/kbn_server_route_repository.mdx
+++ b/api_docs/kbn_server_route_repository.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-server-route-repository
title: "@kbn/server-route-repository"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/server-route-repository plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/server-route-repository']
---
import kbnServerRouteRepositoryObj from './kbn_server_route_repository.devdocs.json';
diff --git a/api_docs/kbn_serverless_common_settings.mdx b/api_docs/kbn_serverless_common_settings.mdx
index 1a313045c662..51fcb06a2835 100644
--- a/api_docs/kbn_serverless_common_settings.mdx
+++ b/api_docs/kbn_serverless_common_settings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-serverless-common-settings
title: "@kbn/serverless-common-settings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/serverless-common-settings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/serverless-common-settings']
---
import kbnServerlessCommonSettingsObj from './kbn_serverless_common_settings.devdocs.json';
diff --git a/api_docs/kbn_serverless_observability_settings.mdx b/api_docs/kbn_serverless_observability_settings.mdx
index 0f93cdf99f3b..6619b0708a03 100644
--- a/api_docs/kbn_serverless_observability_settings.mdx
+++ b/api_docs/kbn_serverless_observability_settings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-serverless-observability-settings
title: "@kbn/serverless-observability-settings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/serverless-observability-settings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/serverless-observability-settings']
---
import kbnServerlessObservabilitySettingsObj from './kbn_serverless_observability_settings.devdocs.json';
diff --git a/api_docs/kbn_serverless_project_switcher.mdx b/api_docs/kbn_serverless_project_switcher.mdx
index 29b61dfd2ed3..b137239ed240 100644
--- a/api_docs/kbn_serverless_project_switcher.mdx
+++ b/api_docs/kbn_serverless_project_switcher.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-serverless-project-switcher
title: "@kbn/serverless-project-switcher"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/serverless-project-switcher plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/serverless-project-switcher']
---
import kbnServerlessProjectSwitcherObj from './kbn_serverless_project_switcher.devdocs.json';
diff --git a/api_docs/kbn_serverless_search_settings.mdx b/api_docs/kbn_serverless_search_settings.mdx
index c759d61b778e..84b6b57cefd8 100644
--- a/api_docs/kbn_serverless_search_settings.mdx
+++ b/api_docs/kbn_serverless_search_settings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-serverless-search-settings
title: "@kbn/serverless-search-settings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/serverless-search-settings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/serverless-search-settings']
---
import kbnServerlessSearchSettingsObj from './kbn_serverless_search_settings.devdocs.json';
diff --git a/api_docs/kbn_serverless_security_settings.mdx b/api_docs/kbn_serverless_security_settings.mdx
index 690e5efff803..a5877c89dc92 100644
--- a/api_docs/kbn_serverless_security_settings.mdx
+++ b/api_docs/kbn_serverless_security_settings.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-serverless-security-settings
title: "@kbn/serverless-security-settings"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/serverless-security-settings plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/serverless-security-settings']
---
import kbnServerlessSecuritySettingsObj from './kbn_serverless_security_settings.devdocs.json';
diff --git a/api_docs/kbn_serverless_storybook_config.mdx b/api_docs/kbn_serverless_storybook_config.mdx
index 988bc0d865b5..b6fd62b3adb5 100644
--- a/api_docs/kbn_serverless_storybook_config.mdx
+++ b/api_docs/kbn_serverless_storybook_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-serverless-storybook-config
title: "@kbn/serverless-storybook-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/serverless-storybook-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/serverless-storybook-config']
---
import kbnServerlessStorybookConfigObj from './kbn_serverless_storybook_config.devdocs.json';
diff --git a/api_docs/kbn_shared_svg.mdx b/api_docs/kbn_shared_svg.mdx
index 8074da948356..f88fffc7d9f0 100644
--- a/api_docs/kbn_shared_svg.mdx
+++ b/api_docs/kbn_shared_svg.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-svg
title: "@kbn/shared-svg"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-svg plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-svg']
---
import kbnSharedSvgObj from './kbn_shared_svg.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_avatar_solution.mdx b/api_docs/kbn_shared_ux_avatar_solution.mdx
index b3ffb4852e7a..d149b6f4d29e 100644
--- a/api_docs/kbn_shared_ux_avatar_solution.mdx
+++ b/api_docs/kbn_shared_ux_avatar_solution.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-avatar-solution
title: "@kbn/shared-ux-avatar-solution"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-avatar-solution plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-avatar-solution']
---
import kbnSharedUxAvatarSolutionObj from './kbn_shared_ux_avatar_solution.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_button_exit_full_screen.mdx b/api_docs/kbn_shared_ux_button_exit_full_screen.mdx
index ac13a918002d..2ad3d0a19dc7 100644
--- a/api_docs/kbn_shared_ux_button_exit_full_screen.mdx
+++ b/api_docs/kbn_shared_ux_button_exit_full_screen.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-button-exit-full-screen
title: "@kbn/shared-ux-button-exit-full-screen"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-button-exit-full-screen plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-button-exit-full-screen']
---
import kbnSharedUxButtonExitFullScreenObj from './kbn_shared_ux_button_exit_full_screen.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_button_toolbar.mdx b/api_docs/kbn_shared_ux_button_toolbar.mdx
index 074968d7401e..55287ba0257b 100644
--- a/api_docs/kbn_shared_ux_button_toolbar.mdx
+++ b/api_docs/kbn_shared_ux_button_toolbar.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-button-toolbar
title: "@kbn/shared-ux-button-toolbar"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-button-toolbar plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-button-toolbar']
---
import kbnSharedUxButtonToolbarObj from './kbn_shared_ux_button_toolbar.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_card_no_data.mdx b/api_docs/kbn_shared_ux_card_no_data.mdx
index e8b826099792..d7b4f3fbc253 100644
--- a/api_docs/kbn_shared_ux_card_no_data.mdx
+++ b/api_docs/kbn_shared_ux_card_no_data.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-card-no-data
title: "@kbn/shared-ux-card-no-data"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-card-no-data plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-card-no-data']
---
import kbnSharedUxCardNoDataObj from './kbn_shared_ux_card_no_data.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_card_no_data_mocks.mdx b/api_docs/kbn_shared_ux_card_no_data_mocks.mdx
index b6efe94703f2..42aede260d83 100644
--- a/api_docs/kbn_shared_ux_card_no_data_mocks.mdx
+++ b/api_docs/kbn_shared_ux_card_no_data_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-card-no-data-mocks
title: "@kbn/shared-ux-card-no-data-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-card-no-data-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-card-no-data-mocks']
---
import kbnSharedUxCardNoDataMocksObj from './kbn_shared_ux_card_no_data_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_chrome_navigation.mdx b/api_docs/kbn_shared_ux_chrome_navigation.mdx
index 137378d96f64..8bc47e3da7db 100644
--- a/api_docs/kbn_shared_ux_chrome_navigation.mdx
+++ b/api_docs/kbn_shared_ux_chrome_navigation.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-chrome-navigation
title: "@kbn/shared-ux-chrome-navigation"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-chrome-navigation plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-chrome-navigation']
---
import kbnSharedUxChromeNavigationObj from './kbn_shared_ux_chrome_navigation.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_error_boundary.mdx b/api_docs/kbn_shared_ux_error_boundary.mdx
index cad3fb13e0dc..3832af783625 100644
--- a/api_docs/kbn_shared_ux_error_boundary.mdx
+++ b/api_docs/kbn_shared_ux_error_boundary.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-error-boundary
title: "@kbn/shared-ux-error-boundary"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-error-boundary plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-error-boundary']
---
import kbnSharedUxErrorBoundaryObj from './kbn_shared_ux_error_boundary.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_context.mdx b/api_docs/kbn_shared_ux_file_context.mdx
index aca4adda5505..26d2139ffaf1 100644
--- a/api_docs/kbn_shared_ux_file_context.mdx
+++ b/api_docs/kbn_shared_ux_file_context.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-context
title: "@kbn/shared-ux-file-context"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-context plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-context']
---
import kbnSharedUxFileContextObj from './kbn_shared_ux_file_context.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_image.mdx b/api_docs/kbn_shared_ux_file_image.mdx
index 54d143780382..91f12c1fbc3a 100644
--- a/api_docs/kbn_shared_ux_file_image.mdx
+++ b/api_docs/kbn_shared_ux_file_image.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-image
title: "@kbn/shared-ux-file-image"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-image plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-image']
---
import kbnSharedUxFileImageObj from './kbn_shared_ux_file_image.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_image_mocks.mdx b/api_docs/kbn_shared_ux_file_image_mocks.mdx
index 2bb58ad325aa..b1de10222a37 100644
--- a/api_docs/kbn_shared_ux_file_image_mocks.mdx
+++ b/api_docs/kbn_shared_ux_file_image_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-image-mocks
title: "@kbn/shared-ux-file-image-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-image-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-image-mocks']
---
import kbnSharedUxFileImageMocksObj from './kbn_shared_ux_file_image_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_mocks.mdx b/api_docs/kbn_shared_ux_file_mocks.mdx
index 7231bffc0de8..4f01c04b82a2 100644
--- a/api_docs/kbn_shared_ux_file_mocks.mdx
+++ b/api_docs/kbn_shared_ux_file_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-mocks
title: "@kbn/shared-ux-file-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-mocks']
---
import kbnSharedUxFileMocksObj from './kbn_shared_ux_file_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_picker.mdx b/api_docs/kbn_shared_ux_file_picker.mdx
index 73c37795c0b6..6a1ff69d3684 100644
--- a/api_docs/kbn_shared_ux_file_picker.mdx
+++ b/api_docs/kbn_shared_ux_file_picker.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-picker
title: "@kbn/shared-ux-file-picker"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-picker plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-picker']
---
import kbnSharedUxFilePickerObj from './kbn_shared_ux_file_picker.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_types.mdx b/api_docs/kbn_shared_ux_file_types.mdx
index 281f23f2c9ce..f40f1c5db8c8 100644
--- a/api_docs/kbn_shared_ux_file_types.mdx
+++ b/api_docs/kbn_shared_ux_file_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-types
title: "@kbn/shared-ux-file-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-types']
---
import kbnSharedUxFileTypesObj from './kbn_shared_ux_file_types.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_upload.mdx b/api_docs/kbn_shared_ux_file_upload.mdx
index b6337e1b9348..03435492fb68 100644
--- a/api_docs/kbn_shared_ux_file_upload.mdx
+++ b/api_docs/kbn_shared_ux_file_upload.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-upload
title: "@kbn/shared-ux-file-upload"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-upload plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-upload']
---
import kbnSharedUxFileUploadObj from './kbn_shared_ux_file_upload.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_file_util.mdx b/api_docs/kbn_shared_ux_file_util.mdx
index 588c026d069b..62e375bfbb4a 100644
--- a/api_docs/kbn_shared_ux_file_util.mdx
+++ b/api_docs/kbn_shared_ux_file_util.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-file-util
title: "@kbn/shared-ux-file-util"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-file-util plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-file-util']
---
import kbnSharedUxFileUtilObj from './kbn_shared_ux_file_util.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_link_redirect_app.mdx b/api_docs/kbn_shared_ux_link_redirect_app.mdx
index 379bb1373006..b850194984dd 100644
--- a/api_docs/kbn_shared_ux_link_redirect_app.mdx
+++ b/api_docs/kbn_shared_ux_link_redirect_app.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-link-redirect-app
title: "@kbn/shared-ux-link-redirect-app"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-link-redirect-app plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-link-redirect-app']
---
import kbnSharedUxLinkRedirectAppObj from './kbn_shared_ux_link_redirect_app.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_link_redirect_app_mocks.mdx b/api_docs/kbn_shared_ux_link_redirect_app_mocks.mdx
index a67b4b5e3ccf..f97c0bddb461 100644
--- a/api_docs/kbn_shared_ux_link_redirect_app_mocks.mdx
+++ b/api_docs/kbn_shared_ux_link_redirect_app_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-link-redirect-app-mocks
title: "@kbn/shared-ux-link-redirect-app-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-link-redirect-app-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-link-redirect-app-mocks']
---
import kbnSharedUxLinkRedirectAppMocksObj from './kbn_shared_ux_link_redirect_app_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_markdown.mdx b/api_docs/kbn_shared_ux_markdown.mdx
index 96e99a0d52b7..8a09ea6deede 100644
--- a/api_docs/kbn_shared_ux_markdown.mdx
+++ b/api_docs/kbn_shared_ux_markdown.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-markdown
title: "@kbn/shared-ux-markdown"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-markdown plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-markdown']
---
import kbnSharedUxMarkdownObj from './kbn_shared_ux_markdown.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_markdown_mocks.mdx b/api_docs/kbn_shared_ux_markdown_mocks.mdx
index 9ca2429019fa..e320b4f70036 100644
--- a/api_docs/kbn_shared_ux_markdown_mocks.mdx
+++ b/api_docs/kbn_shared_ux_markdown_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-markdown-mocks
title: "@kbn/shared-ux-markdown-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-markdown-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-markdown-mocks']
---
import kbnSharedUxMarkdownMocksObj from './kbn_shared_ux_markdown_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_analytics_no_data.mdx b/api_docs/kbn_shared_ux_page_analytics_no_data.mdx
index ac31ab75d845..728faf84a827 100644
--- a/api_docs/kbn_shared_ux_page_analytics_no_data.mdx
+++ b/api_docs/kbn_shared_ux_page_analytics_no_data.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-analytics-no-data
title: "@kbn/shared-ux-page-analytics-no-data"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-analytics-no-data plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-analytics-no-data']
---
import kbnSharedUxPageAnalyticsNoDataObj from './kbn_shared_ux_page_analytics_no_data.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_analytics_no_data_mocks.mdx b/api_docs/kbn_shared_ux_page_analytics_no_data_mocks.mdx
index e042d5f72cb4..da443714d9ed 100644
--- a/api_docs/kbn_shared_ux_page_analytics_no_data_mocks.mdx
+++ b/api_docs/kbn_shared_ux_page_analytics_no_data_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-analytics-no-data-mocks
title: "@kbn/shared-ux-page-analytics-no-data-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-analytics-no-data-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-analytics-no-data-mocks']
---
import kbnSharedUxPageAnalyticsNoDataMocksObj from './kbn_shared_ux_page_analytics_no_data_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_kibana_no_data.mdx b/api_docs/kbn_shared_ux_page_kibana_no_data.mdx
index e4c9d064c652..d37e46b6f42a 100644
--- a/api_docs/kbn_shared_ux_page_kibana_no_data.mdx
+++ b/api_docs/kbn_shared_ux_page_kibana_no_data.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-kibana-no-data
title: "@kbn/shared-ux-page-kibana-no-data"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-kibana-no-data plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-kibana-no-data']
---
import kbnSharedUxPageKibanaNoDataObj from './kbn_shared_ux_page_kibana_no_data.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_kibana_no_data_mocks.mdx b/api_docs/kbn_shared_ux_page_kibana_no_data_mocks.mdx
index ec3b5fa51869..6563132c1cc2 100644
--- a/api_docs/kbn_shared_ux_page_kibana_no_data_mocks.mdx
+++ b/api_docs/kbn_shared_ux_page_kibana_no_data_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-kibana-no-data-mocks
title: "@kbn/shared-ux-page-kibana-no-data-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-kibana-no-data-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-kibana-no-data-mocks']
---
import kbnSharedUxPageKibanaNoDataMocksObj from './kbn_shared_ux_page_kibana_no_data_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_kibana_template.mdx b/api_docs/kbn_shared_ux_page_kibana_template.mdx
index aa6c8823c487..d27cd31a5f15 100644
--- a/api_docs/kbn_shared_ux_page_kibana_template.mdx
+++ b/api_docs/kbn_shared_ux_page_kibana_template.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-kibana-template
title: "@kbn/shared-ux-page-kibana-template"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-kibana-template plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-kibana-template']
---
import kbnSharedUxPageKibanaTemplateObj from './kbn_shared_ux_page_kibana_template.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_kibana_template_mocks.mdx b/api_docs/kbn_shared_ux_page_kibana_template_mocks.mdx
index dcabc39ae080..b60a0bee0867 100644
--- a/api_docs/kbn_shared_ux_page_kibana_template_mocks.mdx
+++ b/api_docs/kbn_shared_ux_page_kibana_template_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-kibana-template-mocks
title: "@kbn/shared-ux-page-kibana-template-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-kibana-template-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-kibana-template-mocks']
---
import kbnSharedUxPageKibanaTemplateMocksObj from './kbn_shared_ux_page_kibana_template_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_no_data.mdx b/api_docs/kbn_shared_ux_page_no_data.mdx
index 3663f3299767..fe2485e5c4db 100644
--- a/api_docs/kbn_shared_ux_page_no_data.mdx
+++ b/api_docs/kbn_shared_ux_page_no_data.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-no-data
title: "@kbn/shared-ux-page-no-data"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-no-data plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-no-data']
---
import kbnSharedUxPageNoDataObj from './kbn_shared_ux_page_no_data.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_no_data_config.mdx b/api_docs/kbn_shared_ux_page_no_data_config.mdx
index af3a61ec2573..c29329a95965 100644
--- a/api_docs/kbn_shared_ux_page_no_data_config.mdx
+++ b/api_docs/kbn_shared_ux_page_no_data_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-no-data-config
title: "@kbn/shared-ux-page-no-data-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-no-data-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-no-data-config']
---
import kbnSharedUxPageNoDataConfigObj from './kbn_shared_ux_page_no_data_config.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_no_data_config_mocks.mdx b/api_docs/kbn_shared_ux_page_no_data_config_mocks.mdx
index 6846d97332f4..5eddf38dff4d 100644
--- a/api_docs/kbn_shared_ux_page_no_data_config_mocks.mdx
+++ b/api_docs/kbn_shared_ux_page_no_data_config_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-no-data-config-mocks
title: "@kbn/shared-ux-page-no-data-config-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-no-data-config-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-no-data-config-mocks']
---
import kbnSharedUxPageNoDataConfigMocksObj from './kbn_shared_ux_page_no_data_config_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_no_data_mocks.mdx b/api_docs/kbn_shared_ux_page_no_data_mocks.mdx
index af6d3c92350c..9eabb720c2ea 100644
--- a/api_docs/kbn_shared_ux_page_no_data_mocks.mdx
+++ b/api_docs/kbn_shared_ux_page_no_data_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-no-data-mocks
title: "@kbn/shared-ux-page-no-data-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-no-data-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-no-data-mocks']
---
import kbnSharedUxPageNoDataMocksObj from './kbn_shared_ux_page_no_data_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_page_solution_nav.mdx b/api_docs/kbn_shared_ux_page_solution_nav.mdx
index 3b8ebe1f8da4..12ca0bc008da 100644
--- a/api_docs/kbn_shared_ux_page_solution_nav.mdx
+++ b/api_docs/kbn_shared_ux_page_solution_nav.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-page-solution-nav
title: "@kbn/shared-ux-page-solution-nav"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-page-solution-nav plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-page-solution-nav']
---
import kbnSharedUxPageSolutionNavObj from './kbn_shared_ux_page_solution_nav.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_prompt_no_data_views.mdx b/api_docs/kbn_shared_ux_prompt_no_data_views.mdx
index fc8336afc4b4..9e807f49cb74 100644
--- a/api_docs/kbn_shared_ux_prompt_no_data_views.mdx
+++ b/api_docs/kbn_shared_ux_prompt_no_data_views.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-prompt-no-data-views
title: "@kbn/shared-ux-prompt-no-data-views"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-prompt-no-data-views plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-prompt-no-data-views']
---
import kbnSharedUxPromptNoDataViewsObj from './kbn_shared_ux_prompt_no_data_views.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_prompt_no_data_views_mocks.mdx b/api_docs/kbn_shared_ux_prompt_no_data_views_mocks.mdx
index 667200425774..21d7ef70a8fe 100644
--- a/api_docs/kbn_shared_ux_prompt_no_data_views_mocks.mdx
+++ b/api_docs/kbn_shared_ux_prompt_no_data_views_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-prompt-no-data-views-mocks
title: "@kbn/shared-ux-prompt-no-data-views-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-prompt-no-data-views-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-prompt-no-data-views-mocks']
---
import kbnSharedUxPromptNoDataViewsMocksObj from './kbn_shared_ux_prompt_no_data_views_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_prompt_not_found.mdx b/api_docs/kbn_shared_ux_prompt_not_found.mdx
index a3974f944829..7c5a27f3475e 100644
--- a/api_docs/kbn_shared_ux_prompt_not_found.mdx
+++ b/api_docs/kbn_shared_ux_prompt_not_found.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-prompt-not-found
title: "@kbn/shared-ux-prompt-not-found"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-prompt-not-found plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-prompt-not-found']
---
import kbnSharedUxPromptNotFoundObj from './kbn_shared_ux_prompt_not_found.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_router.mdx b/api_docs/kbn_shared_ux_router.mdx
index 7d0bd1eece10..5642e85b60ef 100644
--- a/api_docs/kbn_shared_ux_router.mdx
+++ b/api_docs/kbn_shared_ux_router.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-router
title: "@kbn/shared-ux-router"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-router plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-router']
---
import kbnSharedUxRouterObj from './kbn_shared_ux_router.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_router_mocks.mdx b/api_docs/kbn_shared_ux_router_mocks.mdx
index 4a0e8733211a..da46e47323fb 100644
--- a/api_docs/kbn_shared_ux_router_mocks.mdx
+++ b/api_docs/kbn_shared_ux_router_mocks.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-router-mocks
title: "@kbn/shared-ux-router-mocks"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-router-mocks plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-router-mocks']
---
import kbnSharedUxRouterMocksObj from './kbn_shared_ux_router_mocks.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_storybook_config.mdx b/api_docs/kbn_shared_ux_storybook_config.mdx
index f23b448ec377..3b9e587712a5 100644
--- a/api_docs/kbn_shared_ux_storybook_config.mdx
+++ b/api_docs/kbn_shared_ux_storybook_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-storybook-config
title: "@kbn/shared-ux-storybook-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-storybook-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-storybook-config']
---
import kbnSharedUxStorybookConfigObj from './kbn_shared_ux_storybook_config.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_storybook_mock.mdx b/api_docs/kbn_shared_ux_storybook_mock.mdx
index 8be425baf85c..14aa9cc5b9a8 100644
--- a/api_docs/kbn_shared_ux_storybook_mock.mdx
+++ b/api_docs/kbn_shared_ux_storybook_mock.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-storybook-mock
title: "@kbn/shared-ux-storybook-mock"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-storybook-mock plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-storybook-mock']
---
import kbnSharedUxStorybookMockObj from './kbn_shared_ux_storybook_mock.devdocs.json';
diff --git a/api_docs/kbn_shared_ux_utility.mdx b/api_docs/kbn_shared_ux_utility.mdx
index 28d100e1f6e4..2ada01cdf92e 100644
--- a/api_docs/kbn_shared_ux_utility.mdx
+++ b/api_docs/kbn_shared_ux_utility.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-shared-ux-utility
title: "@kbn/shared-ux-utility"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/shared-ux-utility plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/shared-ux-utility']
---
import kbnSharedUxUtilityObj from './kbn_shared_ux_utility.devdocs.json';
diff --git a/api_docs/kbn_slo_schema.mdx b/api_docs/kbn_slo_schema.mdx
index 1e9b031c0921..3c0dd0259c01 100644
--- a/api_docs/kbn_slo_schema.mdx
+++ b/api_docs/kbn_slo_schema.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-slo-schema
title: "@kbn/slo-schema"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/slo-schema plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/slo-schema']
---
import kbnSloSchemaObj from './kbn_slo_schema.devdocs.json';
diff --git a/api_docs/kbn_some_dev_log.mdx b/api_docs/kbn_some_dev_log.mdx
index 1a324da0a9a5..9838ab54e9f6 100644
--- a/api_docs/kbn_some_dev_log.mdx
+++ b/api_docs/kbn_some_dev_log.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-some-dev-log
title: "@kbn/some-dev-log"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/some-dev-log plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/some-dev-log']
---
import kbnSomeDevLogObj from './kbn_some_dev_log.devdocs.json';
diff --git a/api_docs/kbn_sort_predicates.mdx b/api_docs/kbn_sort_predicates.mdx
index 900482b01f2b..6c116cdcee19 100644
--- a/api_docs/kbn_sort_predicates.mdx
+++ b/api_docs/kbn_sort_predicates.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-sort-predicates
title: "@kbn/sort-predicates"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/sort-predicates plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/sort-predicates']
---
import kbnSortPredicatesObj from './kbn_sort_predicates.devdocs.json';
diff --git a/api_docs/kbn_std.mdx b/api_docs/kbn_std.mdx
index 1a3f3b3a7c57..c9c92f1da76b 100644
--- a/api_docs/kbn_std.mdx
+++ b/api_docs/kbn_std.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-std
title: "@kbn/std"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/std plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/std']
---
import kbnStdObj from './kbn_std.devdocs.json';
diff --git a/api_docs/kbn_stdio_dev_helpers.mdx b/api_docs/kbn_stdio_dev_helpers.mdx
index 06b76c6b1a9d..bde113af9145 100644
--- a/api_docs/kbn_stdio_dev_helpers.mdx
+++ b/api_docs/kbn_stdio_dev_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-stdio-dev-helpers
title: "@kbn/stdio-dev-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/stdio-dev-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/stdio-dev-helpers']
---
import kbnStdioDevHelpersObj from './kbn_stdio_dev_helpers.devdocs.json';
diff --git a/api_docs/kbn_storybook.mdx b/api_docs/kbn_storybook.mdx
index e3ac6ad6b3a9..470353b6a288 100644
--- a/api_docs/kbn_storybook.mdx
+++ b/api_docs/kbn_storybook.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-storybook
title: "@kbn/storybook"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/storybook plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/storybook']
---
import kbnStorybookObj from './kbn_storybook.devdocs.json';
diff --git a/api_docs/kbn_telemetry_tools.mdx b/api_docs/kbn_telemetry_tools.mdx
index 9188aca673cd..15b0e8d312fd 100644
--- a/api_docs/kbn_telemetry_tools.mdx
+++ b/api_docs/kbn_telemetry_tools.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-telemetry-tools
title: "@kbn/telemetry-tools"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/telemetry-tools plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/telemetry-tools']
---
import kbnTelemetryToolsObj from './kbn_telemetry_tools.devdocs.json';
diff --git a/api_docs/kbn_test.mdx b/api_docs/kbn_test.mdx
index 72702a196a10..c7c3d9d43431 100644
--- a/api_docs/kbn_test.mdx
+++ b/api_docs/kbn_test.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-test
title: "@kbn/test"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/test plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/test']
---
import kbnTestObj from './kbn_test.devdocs.json';
diff --git a/api_docs/kbn_test_eui_helpers.mdx b/api_docs/kbn_test_eui_helpers.mdx
index 400b0a11ef20..6ce6d3c895ef 100644
--- a/api_docs/kbn_test_eui_helpers.mdx
+++ b/api_docs/kbn_test_eui_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-test-eui-helpers
title: "@kbn/test-eui-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/test-eui-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/test-eui-helpers']
---
import kbnTestEuiHelpersObj from './kbn_test_eui_helpers.devdocs.json';
diff --git a/api_docs/kbn_test_jest_helpers.mdx b/api_docs/kbn_test_jest_helpers.mdx
index 7dcc9cce9aec..3b1cf10e3359 100644
--- a/api_docs/kbn_test_jest_helpers.mdx
+++ b/api_docs/kbn_test_jest_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-test-jest-helpers
title: "@kbn/test-jest-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/test-jest-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/test-jest-helpers']
---
import kbnTestJestHelpersObj from './kbn_test_jest_helpers.devdocs.json';
diff --git a/api_docs/kbn_test_subj_selector.mdx b/api_docs/kbn_test_subj_selector.mdx
index 198b59a35398..a128b6d8bc13 100644
--- a/api_docs/kbn_test_subj_selector.mdx
+++ b/api_docs/kbn_test_subj_selector.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-test-subj-selector
title: "@kbn/test-subj-selector"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/test-subj-selector plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/test-subj-selector']
---
import kbnTestSubjSelectorObj from './kbn_test_subj_selector.devdocs.json';
diff --git a/api_docs/kbn_text_based_editor.mdx b/api_docs/kbn_text_based_editor.mdx
index 44e728272dab..f0ca76b44960 100644
--- a/api_docs/kbn_text_based_editor.mdx
+++ b/api_docs/kbn_text_based_editor.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-text-based-editor
title: "@kbn/text-based-editor"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/text-based-editor plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/text-based-editor']
---
import kbnTextBasedEditorObj from './kbn_text_based_editor.devdocs.json';
diff --git a/api_docs/kbn_timerange.mdx b/api_docs/kbn_timerange.mdx
index 73b003e410d8..d8f8fb57750f 100644
--- a/api_docs/kbn_timerange.mdx
+++ b/api_docs/kbn_timerange.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-timerange
title: "@kbn/timerange"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/timerange plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/timerange']
---
import kbnTimerangeObj from './kbn_timerange.devdocs.json';
diff --git a/api_docs/kbn_tooling_log.mdx b/api_docs/kbn_tooling_log.mdx
index b238ba39faf5..db62c0189b66 100644
--- a/api_docs/kbn_tooling_log.mdx
+++ b/api_docs/kbn_tooling_log.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-tooling-log
title: "@kbn/tooling-log"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/tooling-log plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/tooling-log']
---
import kbnToolingLogObj from './kbn_tooling_log.devdocs.json';
diff --git a/api_docs/kbn_triggers_actions_ui_types.mdx b/api_docs/kbn_triggers_actions_ui_types.mdx
index e7418cf1a9db..690ce76d4893 100644
--- a/api_docs/kbn_triggers_actions_ui_types.mdx
+++ b/api_docs/kbn_triggers_actions_ui_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-triggers-actions-ui-types
title: "@kbn/triggers-actions-ui-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/triggers-actions-ui-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/triggers-actions-ui-types']
---
import kbnTriggersActionsUiTypesObj from './kbn_triggers_actions_ui_types.devdocs.json';
diff --git a/api_docs/kbn_ts_projects.mdx b/api_docs/kbn_ts_projects.mdx
index 3ade690c5138..77c4c24e765f 100644
--- a/api_docs/kbn_ts_projects.mdx
+++ b/api_docs/kbn_ts_projects.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ts-projects
title: "@kbn/ts-projects"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ts-projects plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ts-projects']
---
import kbnTsProjectsObj from './kbn_ts_projects.devdocs.json';
diff --git a/api_docs/kbn_typed_react_router_config.mdx b/api_docs/kbn_typed_react_router_config.mdx
index 5357ccbc10a3..96446f9cfaf0 100644
--- a/api_docs/kbn_typed_react_router_config.mdx
+++ b/api_docs/kbn_typed_react_router_config.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-typed-react-router-config
title: "@kbn/typed-react-router-config"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/typed-react-router-config plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/typed-react-router-config']
---
import kbnTypedReactRouterConfigObj from './kbn_typed_react_router_config.devdocs.json';
diff --git a/api_docs/kbn_ui_actions_browser.mdx b/api_docs/kbn_ui_actions_browser.mdx
index 83f17ad351b4..b499a8ced6cd 100644
--- a/api_docs/kbn_ui_actions_browser.mdx
+++ b/api_docs/kbn_ui_actions_browser.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ui-actions-browser
title: "@kbn/ui-actions-browser"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ui-actions-browser plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ui-actions-browser']
---
import kbnUiActionsBrowserObj from './kbn_ui_actions_browser.devdocs.json';
diff --git a/api_docs/kbn_ui_shared_deps_src.mdx b/api_docs/kbn_ui_shared_deps_src.mdx
index 4eed9c7ffed2..d28fcd158cff 100644
--- a/api_docs/kbn_ui_shared_deps_src.mdx
+++ b/api_docs/kbn_ui_shared_deps_src.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ui-shared-deps-src
title: "@kbn/ui-shared-deps-src"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ui-shared-deps-src plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ui-shared-deps-src']
---
import kbnUiSharedDepsSrcObj from './kbn_ui_shared_deps_src.devdocs.json';
diff --git a/api_docs/kbn_ui_theme.mdx b/api_docs/kbn_ui_theme.mdx
index 363d394262a1..c1e57700ca4c 100644
--- a/api_docs/kbn_ui_theme.mdx
+++ b/api_docs/kbn_ui_theme.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-ui-theme
title: "@kbn/ui-theme"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/ui-theme plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/ui-theme']
---
import kbnUiThemeObj from './kbn_ui_theme.devdocs.json';
diff --git a/api_docs/kbn_unified_data_table.mdx b/api_docs/kbn_unified_data_table.mdx
index 5ce21beccd0d..4cdd60f69c2c 100644
--- a/api_docs/kbn_unified_data_table.mdx
+++ b/api_docs/kbn_unified_data_table.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-unified-data-table
title: "@kbn/unified-data-table"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/unified-data-table plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/unified-data-table']
---
import kbnUnifiedDataTableObj from './kbn_unified_data_table.devdocs.json';
diff --git a/api_docs/kbn_unified_doc_viewer.mdx b/api_docs/kbn_unified_doc_viewer.mdx
index d4d51462e232..08ae619f97c2 100644
--- a/api_docs/kbn_unified_doc_viewer.mdx
+++ b/api_docs/kbn_unified_doc_viewer.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-unified-doc-viewer
title: "@kbn/unified-doc-viewer"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/unified-doc-viewer plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/unified-doc-viewer']
---
import kbnUnifiedDocViewerObj from './kbn_unified_doc_viewer.devdocs.json';
diff --git a/api_docs/kbn_unified_field_list.mdx b/api_docs/kbn_unified_field_list.mdx
index 05119178e8e1..9460c0409e42 100644
--- a/api_docs/kbn_unified_field_list.mdx
+++ b/api_docs/kbn_unified_field_list.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-unified-field-list
title: "@kbn/unified-field-list"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/unified-field-list plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/unified-field-list']
---
import kbnUnifiedFieldListObj from './kbn_unified_field_list.devdocs.json';
diff --git a/api_docs/kbn_unsaved_changes_badge.mdx b/api_docs/kbn_unsaved_changes_badge.mdx
index d76b354920aa..f161da4e5d38 100644
--- a/api_docs/kbn_unsaved_changes_badge.mdx
+++ b/api_docs/kbn_unsaved_changes_badge.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-unsaved-changes-badge
title: "@kbn/unsaved-changes-badge"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/unsaved-changes-badge plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/unsaved-changes-badge']
---
import kbnUnsavedChangesBadgeObj from './kbn_unsaved_changes_badge.devdocs.json';
diff --git a/api_docs/kbn_use_tracked_promise.mdx b/api_docs/kbn_use_tracked_promise.mdx
index 1afee7ee3f16..d629781d7d30 100644
--- a/api_docs/kbn_use_tracked_promise.mdx
+++ b/api_docs/kbn_use_tracked_promise.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-use-tracked-promise
title: "@kbn/use-tracked-promise"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/use-tracked-promise plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/use-tracked-promise']
---
import kbnUseTrackedPromiseObj from './kbn_use_tracked_promise.devdocs.json';
diff --git a/api_docs/kbn_user_profile_components.mdx b/api_docs/kbn_user_profile_components.mdx
index 0b58c3f2b34e..09c279eff78d 100644
--- a/api_docs/kbn_user_profile_components.mdx
+++ b/api_docs/kbn_user_profile_components.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-user-profile-components
title: "@kbn/user-profile-components"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/user-profile-components plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/user-profile-components']
---
import kbnUserProfileComponentsObj from './kbn_user_profile_components.devdocs.json';
diff --git a/api_docs/kbn_utility_types.mdx b/api_docs/kbn_utility_types.mdx
index 6dce10517a90..972b7882d580 100644
--- a/api_docs/kbn_utility_types.mdx
+++ b/api_docs/kbn_utility_types.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-utility-types
title: "@kbn/utility-types"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/utility-types plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/utility-types']
---
import kbnUtilityTypesObj from './kbn_utility_types.devdocs.json';
diff --git a/api_docs/kbn_utility_types_jest.mdx b/api_docs/kbn_utility_types_jest.mdx
index e38abb50b3a1..36d37f510ac9 100644
--- a/api_docs/kbn_utility_types_jest.mdx
+++ b/api_docs/kbn_utility_types_jest.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-utility-types-jest
title: "@kbn/utility-types-jest"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/utility-types-jest plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/utility-types-jest']
---
import kbnUtilityTypesJestObj from './kbn_utility_types_jest.devdocs.json';
diff --git a/api_docs/kbn_utils.mdx b/api_docs/kbn_utils.mdx
index cc7feaa3ed31..2d24e1962dad 100644
--- a/api_docs/kbn_utils.mdx
+++ b/api_docs/kbn_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-utils
title: "@kbn/utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/utils']
---
import kbnUtilsObj from './kbn_utils.devdocs.json';
diff --git a/api_docs/kbn_visualization_ui_components.mdx b/api_docs/kbn_visualization_ui_components.mdx
index 655dad0ed874..bc07fead951f 100644
--- a/api_docs/kbn_visualization_ui_components.mdx
+++ b/api_docs/kbn_visualization_ui_components.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-visualization-ui-components
title: "@kbn/visualization-ui-components"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/visualization-ui-components plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/visualization-ui-components']
---
import kbnVisualizationUiComponentsObj from './kbn_visualization_ui_components.devdocs.json';
diff --git a/api_docs/kbn_visualization_utils.mdx b/api_docs/kbn_visualization_utils.mdx
index 53f44995315a..3dacde128bc0 100644
--- a/api_docs/kbn_visualization_utils.mdx
+++ b/api_docs/kbn_visualization_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-visualization-utils
title: "@kbn/visualization-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/visualization-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/visualization-utils']
---
import kbnVisualizationUtilsObj from './kbn_visualization_utils.devdocs.json';
diff --git a/api_docs/kbn_xstate_utils.mdx b/api_docs/kbn_xstate_utils.mdx
index f8895e6c0d11..647470191737 100644
--- a/api_docs/kbn_xstate_utils.mdx
+++ b/api_docs/kbn_xstate_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-xstate-utils
title: "@kbn/xstate-utils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/xstate-utils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/xstate-utils']
---
import kbnXstateUtilsObj from './kbn_xstate_utils.devdocs.json';
diff --git a/api_docs/kbn_yarn_lock_validator.mdx b/api_docs/kbn_yarn_lock_validator.mdx
index 9f8067195fc5..199b1a434d49 100644
--- a/api_docs/kbn_yarn_lock_validator.mdx
+++ b/api_docs/kbn_yarn_lock_validator.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-yarn-lock-validator
title: "@kbn/yarn-lock-validator"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/yarn-lock-validator plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/yarn-lock-validator']
---
import kbnYarnLockValidatorObj from './kbn_yarn_lock_validator.devdocs.json';
diff --git a/api_docs/kbn_zod_helpers.mdx b/api_docs/kbn_zod_helpers.mdx
index 751fc3f3772a..fe91f2100f74 100644
--- a/api_docs/kbn_zod_helpers.mdx
+++ b/api_docs/kbn_zod_helpers.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kbn-zod-helpers
title: "@kbn/zod-helpers"
image: https://source.unsplash.com/400x175/?github
description: API docs for the @kbn/zod-helpers plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', '@kbn/zod-helpers']
---
import kbnZodHelpersObj from './kbn_zod_helpers.devdocs.json';
diff --git a/api_docs/kibana_overview.mdx b/api_docs/kibana_overview.mdx
index 1c8a459fa971..630664aa4032 100644
--- a/api_docs/kibana_overview.mdx
+++ b/api_docs/kibana_overview.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kibanaOverview
title: "kibanaOverview"
image: https://source.unsplash.com/400x175/?github
description: API docs for the kibanaOverview plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'kibanaOverview']
---
import kibanaOverviewObj from './kibana_overview.devdocs.json';
diff --git a/api_docs/kibana_react.mdx b/api_docs/kibana_react.mdx
index 364e9e011fcd..917ca53651a8 100644
--- a/api_docs/kibana_react.mdx
+++ b/api_docs/kibana_react.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kibanaReact
title: "kibanaReact"
image: https://source.unsplash.com/400x175/?github
description: API docs for the kibanaReact plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'kibanaReact']
---
import kibanaReactObj from './kibana_react.devdocs.json';
diff --git a/api_docs/kibana_utils.mdx b/api_docs/kibana_utils.mdx
index 7efb92ccbc7b..018628ba2dcb 100644
--- a/api_docs/kibana_utils.mdx
+++ b/api_docs/kibana_utils.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kibanaUtils
title: "kibanaUtils"
image: https://source.unsplash.com/400x175/?github
description: API docs for the kibanaUtils plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'kibanaUtils']
---
import kibanaUtilsObj from './kibana_utils.devdocs.json';
diff --git a/api_docs/kubernetes_security.mdx b/api_docs/kubernetes_security.mdx
index 78d7e2b5fdaf..2c1318440580 100644
--- a/api_docs/kubernetes_security.mdx
+++ b/api_docs/kubernetes_security.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/kubernetesSecurity
title: "kubernetesSecurity"
image: https://source.unsplash.com/400x175/?github
description: API docs for the kubernetesSecurity plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'kubernetesSecurity']
---
import kubernetesSecurityObj from './kubernetes_security.devdocs.json';
diff --git a/api_docs/lens.devdocs.json b/api_docs/lens.devdocs.json
index 8101e6f7a43f..0249b720ea6a 100644
--- a/api_docs/lens.devdocs.json
+++ b/api_docs/lens.devdocs.json
@@ -998,10 +998,10 @@
"functions": [
{
"parentPluginId": "lens",
- "id": "def-public.apiHasLensConfig",
+ "id": "def-public.isLensApi",
"type": "Function",
"tags": [],
- "label": "apiHasLensConfig",
+ "label": "isLensApi",
"description": [],
"signature": [
"(api: unknown) => api is ",
@@ -1009,17 +1009,17 @@
"pluginId": "lens",
"scope": "public",
"docId": "kibLensPluginApi",
- "section": "def-public.HasLensConfig",
- "text": "HasLensConfig"
+ "section": "def-public.LensApi",
+ "text": "LensApi"
}
],
- "path": "x-pack/plugins/lens/public/embeddable/interfaces/has_lens_config.ts",
+ "path": "x-pack/plugins/lens/public/embeddable/interfaces/lens_api.ts",
"deprecated": false,
"trackAdoption": false,
"children": [
{
"parentPluginId": "lens",
- "id": "def-public.apiHasLensConfig.$1",
+ "id": "def-public.isLensApi.$1",
"type": "Unknown",
"tags": [],
"label": "api",
@@ -1027,7 +1027,7 @@
"signature": [
"unknown"
],
- "path": "x-pack/plugins/lens/public/embeddable/interfaces/has_lens_config.ts",
+ "path": "x-pack/plugins/lens/public/embeddable/interfaces/lens_api.ts",
"deprecated": false,
"trackAdoption": false,
"isRequired": true
@@ -10822,36 +10822,6 @@
"trackAdoption": false,
"initialIsOpen": false
},
- {
- "parentPluginId": "lens",
- "id": "def-public.HasLensConfig",
- "type": "Type",
- "tags": [],
- "label": "HasLensConfig",
- "description": [],
- "signature": [
- {
- "pluginId": "@kbn/presentation-publishing",
- "scope": "common",
- "docId": "kibKbnPresentationPublishingPluginApi",
- "section": "def-common.HasType",
- "text": "HasType"
- },
- "<\"lens\"> & { getSavedVis: () => Readonly<",
- {
- "pluginId": "lens",
- "scope": "public",
- "docId": "kibLensPluginApi",
- "section": "def-public.LensSavedObjectAttributes",
- "text": "LensSavedObjectAttributes"
- },
- " | undefined>; }"
- ],
- "path": "x-pack/plugins/lens/public/embeddable/interfaces/has_lens_config.ts",
- "deprecated": false,
- "trackAdoption": false,
- "initialIsOpen": false
- },
{
"parentPluginId": "lens",
"id": "def-public.HeatmapVisualizationState",
@@ -10946,6 +10916,60 @@
"trackAdoption": false,
"initialIsOpen": false
},
+ {
+ "parentPluginId": "lens",
+ "id": "def-public.LensApi",
+ "type": "Type",
+ "tags": [],
+ "label": "LensApi",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.HasType",
+ "text": "HasType"
+ },
+ "<\"lens\"> & { getSavedVis: () => Readonly<",
+ {
+ "pluginId": "lens",
+ "scope": "public",
+ "docId": "kibLensPluginApi",
+ "section": "def-public.LensSavedObjectAttributes",
+ "text": "LensSavedObjectAttributes"
+ },
+ " | undefined>; } & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesPanelTitle",
+ "text": "PublishesPanelTitle"
+ },
+ " & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesLocalUnifiedSearch",
+ "text": "PublishesLocalUnifiedSearch"
+ },
+ " & Partial<",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.HasParentApi",
+ "text": "HasParentApi"
+ },
+ ">"
+ ],
+ "path": "x-pack/plugins/lens/public/embeddable/interfaces/lens_api.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "lens",
"id": "def-public.LensEmbeddableInput",
diff --git a/api_docs/lens.mdx b/api_docs/lens.mdx
index 4a3669f7ade4..4874352aa948 100644
--- a/api_docs/lens.mdx
+++ b/api_docs/lens.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/lens
title: "lens"
image: https://source.unsplash.com/400x175/?github
description: API docs for the lens plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'lens']
---
import lensObj from './lens.devdocs.json';
diff --git a/api_docs/license_api_guard.mdx b/api_docs/license_api_guard.mdx
index 1a68e4477417..e7a3bd040971 100644
--- a/api_docs/license_api_guard.mdx
+++ b/api_docs/license_api_guard.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/licenseApiGuard
title: "licenseApiGuard"
image: https://source.unsplash.com/400x175/?github
description: API docs for the licenseApiGuard plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'licenseApiGuard']
---
import licenseApiGuardObj from './license_api_guard.devdocs.json';
diff --git a/api_docs/license_management.mdx b/api_docs/license_management.mdx
index 7eeb0b8356cd..110fab3a4430 100644
--- a/api_docs/license_management.mdx
+++ b/api_docs/license_management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/licenseManagement
title: "licenseManagement"
image: https://source.unsplash.com/400x175/?github
description: API docs for the licenseManagement plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'licenseManagement']
---
import licenseManagementObj from './license_management.devdocs.json';
diff --git a/api_docs/licensing.mdx b/api_docs/licensing.mdx
index 0055d7b36371..e02e40e7a115 100644
--- a/api_docs/licensing.mdx
+++ b/api_docs/licensing.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/licensing
title: "licensing"
image: https://source.unsplash.com/400x175/?github
description: API docs for the licensing plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'licensing']
---
import licensingObj from './licensing.devdocs.json';
diff --git a/api_docs/links.mdx b/api_docs/links.mdx
index d81141dbc0e7..14f392bb6c06 100644
--- a/api_docs/links.mdx
+++ b/api_docs/links.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/links
title: "links"
image: https://source.unsplash.com/400x175/?github
description: API docs for the links plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'links']
---
import linksObj from './links.devdocs.json';
diff --git a/api_docs/lists.mdx b/api_docs/lists.mdx
index 7fc07a0909e1..c6836b8badf8 100644
--- a/api_docs/lists.mdx
+++ b/api_docs/lists.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/lists
title: "lists"
image: https://source.unsplash.com/400x175/?github
description: API docs for the lists plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'lists']
---
import listsObj from './lists.devdocs.json';
diff --git a/api_docs/logs_explorer.mdx b/api_docs/logs_explorer.mdx
index 2eb711a95870..0e769b9a568a 100644
--- a/api_docs/logs_explorer.mdx
+++ b/api_docs/logs_explorer.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/logsExplorer
title: "logsExplorer"
image: https://source.unsplash.com/400x175/?github
description: API docs for the logsExplorer plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'logsExplorer']
---
import logsExplorerObj from './logs_explorer.devdocs.json';
diff --git a/api_docs/logs_shared.devdocs.json b/api_docs/logs_shared.devdocs.json
index 240de8934f12..0fc4824cf1f3 100644
--- a/api_docs/logs_shared.devdocs.json
+++ b/api_docs/logs_shared.devdocs.json
@@ -2729,8 +2729,8 @@
"pluginId": "observabilityAIAssistant",
"scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-public.ObservabilityAIAssistantPluginStart",
- "text": "ObservabilityAIAssistantPluginStart"
+ "section": "def-public.ObservabilityAIAssistantPublicStart",
+ "text": "ObservabilityAIAssistantPublicStart"
}
],
"path": "x-pack/plugins/observability_solution/logs_shared/public/components/log_ai_assistant/log_ai_assistant.tsx",
@@ -3017,8 +3017,8 @@
"pluginId": "observabilityAIAssistant",
"scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-public.ObservabilityAIAssistantPluginStart",
- "text": "ObservabilityAIAssistantPluginStart"
+ "section": "def-public.ObservabilityAIAssistantPublicStart",
+ "text": "ObservabilityAIAssistantPublicStart"
}
],
"path": "x-pack/plugins/observability_solution/logs_shared/public/types.ts",
diff --git a/api_docs/logs_shared.mdx b/api_docs/logs_shared.mdx
index 7c413d187df8..aec00b6b8c1e 100644
--- a/api_docs/logs_shared.mdx
+++ b/api_docs/logs_shared.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/logsShared
title: "logsShared"
image: https://source.unsplash.com/400x175/?github
description: API docs for the logsShared plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'logsShared']
---
import logsSharedObj from './logs_shared.devdocs.json';
diff --git a/api_docs/management.mdx b/api_docs/management.mdx
index b23c0b7eb371..6f9847dc6273 100644
--- a/api_docs/management.mdx
+++ b/api_docs/management.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/management
title: "management"
image: https://source.unsplash.com/400x175/?github
description: API docs for the management plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'management']
---
import managementObj from './management.devdocs.json';
diff --git a/api_docs/maps.devdocs.json b/api_docs/maps.devdocs.json
index 31a5f2ead02e..832647b97e45 100644
--- a/api_docs/maps.devdocs.json
+++ b/api_docs/maps.devdocs.json
@@ -1395,7 +1395,48 @@
"initialIsOpen": false
}
],
- "functions": [],
+ "functions": [
+ {
+ "parentPluginId": "maps",
+ "id": "def-public.isMapApi",
+ "type": "Function",
+ "tags": [],
+ "label": "isMapApi",
+ "description": [],
+ "signature": [
+ "(api: unknown) => api is ",
+ {
+ "pluginId": "maps",
+ "scope": "public",
+ "docId": "kibMapsPluginApi",
+ "section": "def-public.MapApi",
+ "text": "MapApi"
+ }
+ ],
+ "path": "x-pack/plugins/maps/public/embeddable/map_api.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "maps",
+ "id": "def-public.isMapApi.$1",
+ "type": "Unknown",
+ "tags": [],
+ "label": "api",
+ "description": [],
+ "signature": [
+ "unknown"
+ ],
+ "path": "x-pack/plugins/maps/public/embeddable/map_api.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ }
+ ],
"interfaces": [
{
"parentPluginId": "maps",
@@ -3927,6 +3968,62 @@
"trackAdoption": false,
"initialIsOpen": false
},
+ {
+ "parentPluginId": "maps",
+ "id": "def-public.MapApi",
+ "type": "Type",
+ "tags": [],
+ "label": "MapApi",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.HasType",
+ "text": "HasType"
+ },
+ "<\"map\"> & { getLayerList: () => ",
+ "ILayer",
+ "[]; } & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesDataViews",
+ "text": "PublishesDataViews"
+ },
+ " & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesPanelTitle",
+ "text": "PublishesPanelTitle"
+ },
+ " & ",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.PublishesLocalUnifiedSearch",
+ "text": "PublishesLocalUnifiedSearch"
+ },
+ " & Partial<",
+ {
+ "pluginId": "@kbn/presentation-publishing",
+ "scope": "common",
+ "docId": "kibKbnPresentationPublishingPluginApi",
+ "section": "def-common.HasParentApi",
+ "text": "HasParentApi"
+ },
+ ">"
+ ],
+ "path": "x-pack/plugins/maps/public/embeddable/map_api.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "maps",
"id": "def-public.MapEmbeddableInput",
diff --git a/api_docs/maps.mdx b/api_docs/maps.mdx
index eee8d0c6572a..7b68a227c5d9 100644
--- a/api_docs/maps.mdx
+++ b/api_docs/maps.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/maps
title: "maps"
image: https://source.unsplash.com/400x175/?github
description: API docs for the maps plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'maps']
---
import mapsObj from './maps.devdocs.json';
@@ -21,7 +21,7 @@ Contact [@elastic/kibana-gis](https://github.com/orgs/elastic/teams/kibana-gis)
| Public API count | Any count | Items lacking comments | Missing exports |
|-------------------|-----------|------------------------|-----------------|
-| 261 | 0 | 260 | 28 |
+| 264 | 0 | 263 | 28 |
## Client
@@ -31,6 +31,9 @@ Contact [@elastic/kibana-gis](https://github.com/orgs/elastic/teams/kibana-gis)
### Start
+### Functions
+
+
### Classes
diff --git a/api_docs/maps_ems.mdx b/api_docs/maps_ems.mdx
index 0239d8189b2a..797ea3caa3eb 100644
--- a/api_docs/maps_ems.mdx
+++ b/api_docs/maps_ems.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/mapsEms
title: "mapsEms"
image: https://source.unsplash.com/400x175/?github
description: API docs for the mapsEms plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'mapsEms']
---
import mapsEmsObj from './maps_ems.devdocs.json';
diff --git a/api_docs/metrics_data_access.mdx b/api_docs/metrics_data_access.mdx
index ea0b44a1d513..b2f4acdfdbae 100644
--- a/api_docs/metrics_data_access.mdx
+++ b/api_docs/metrics_data_access.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/metricsDataAccess
title: "metricsDataAccess"
image: https://source.unsplash.com/400x175/?github
description: API docs for the metricsDataAccess plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'metricsDataAccess']
---
import metricsDataAccessObj from './metrics_data_access.devdocs.json';
diff --git a/api_docs/ml.mdx b/api_docs/ml.mdx
index e6c111361b4a..2f612bfbf7be 100644
--- a/api_docs/ml.mdx
+++ b/api_docs/ml.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/ml
title: "ml"
image: https://source.unsplash.com/400x175/?github
description: API docs for the ml plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'ml']
---
import mlObj from './ml.devdocs.json';
diff --git a/api_docs/mock_idp_plugin.mdx b/api_docs/mock_idp_plugin.mdx
index 350813cf81a8..df4d621d3a6b 100644
--- a/api_docs/mock_idp_plugin.mdx
+++ b/api_docs/mock_idp_plugin.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/mockIdpPlugin
title: "mockIdpPlugin"
image: https://source.unsplash.com/400x175/?github
description: API docs for the mockIdpPlugin plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'mockIdpPlugin']
---
import mockIdpPluginObj from './mock_idp_plugin.devdocs.json';
diff --git a/api_docs/monitoring.mdx b/api_docs/monitoring.mdx
index e3abb6c31373..1c3b9180010a 100644
--- a/api_docs/monitoring.mdx
+++ b/api_docs/monitoring.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/monitoring
title: "monitoring"
image: https://source.unsplash.com/400x175/?github
description: API docs for the monitoring plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'monitoring']
---
import monitoringObj from './monitoring.devdocs.json';
diff --git a/api_docs/monitoring_collection.mdx b/api_docs/monitoring_collection.mdx
index 4f88896facf9..9f6667c9920b 100644
--- a/api_docs/monitoring_collection.mdx
+++ b/api_docs/monitoring_collection.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/monitoringCollection
title: "monitoringCollection"
image: https://source.unsplash.com/400x175/?github
description: API docs for the monitoringCollection plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'monitoringCollection']
---
import monitoringCollectionObj from './monitoring_collection.devdocs.json';
diff --git a/api_docs/navigation.mdx b/api_docs/navigation.mdx
index 8c3905991ac7..d2087f5df626 100644
--- a/api_docs/navigation.mdx
+++ b/api_docs/navigation.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/navigation
title: "navigation"
image: https://source.unsplash.com/400x175/?github
description: API docs for the navigation plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'navigation']
---
import navigationObj from './navigation.devdocs.json';
diff --git a/api_docs/newsfeed.mdx b/api_docs/newsfeed.mdx
index ce555648ca9e..e8715316606e 100644
--- a/api_docs/newsfeed.mdx
+++ b/api_docs/newsfeed.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/newsfeed
title: "newsfeed"
image: https://source.unsplash.com/400x175/?github
description: API docs for the newsfeed plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'newsfeed']
---
import newsfeedObj from './newsfeed.devdocs.json';
diff --git a/api_docs/no_data_page.mdx b/api_docs/no_data_page.mdx
index 63aa33b394e2..704dca6e1e3c 100644
--- a/api_docs/no_data_page.mdx
+++ b/api_docs/no_data_page.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/noDataPage
title: "noDataPage"
image: https://source.unsplash.com/400x175/?github
description: API docs for the noDataPage plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'noDataPage']
---
import noDataPageObj from './no_data_page.devdocs.json';
diff --git a/api_docs/notifications.mdx b/api_docs/notifications.mdx
index 80782cc448e0..a81f7d58b8ac 100644
--- a/api_docs/notifications.mdx
+++ b/api_docs/notifications.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/notifications
title: "notifications"
image: https://source.unsplash.com/400x175/?github
description: API docs for the notifications plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'notifications']
---
import notificationsObj from './notifications.devdocs.json';
diff --git a/api_docs/observability.devdocs.json b/api_docs/observability.devdocs.json
index dd39124bac3e..91bee1c20261 100644
--- a/api_docs/observability.devdocs.json
+++ b/api_docs/observability.devdocs.json
@@ -2494,8 +2494,8 @@
"pluginId": "observabilityAIAssistant",
"scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-public.ObservabilityAIAssistantPluginSetup",
- "text": "ObservabilityAIAssistantPluginSetup"
+ "section": "def-public.ObservabilityAIAssistantPublicSetup",
+ "text": "ObservabilityAIAssistantPublicSetup"
}
],
"path": "x-pack/plugins/observability_solution/observability/public/plugin.ts",
@@ -3143,8 +3143,8 @@
"pluginId": "observabilityAIAssistant",
"scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-public.ObservabilityAIAssistantPluginStart",
- "text": "ObservabilityAIAssistantPluginStart"
+ "section": "def-public.ObservabilityAIAssistantPublicStart",
+ "text": "ObservabilityAIAssistantPublicStart"
}
],
"path": "x-pack/plugins/observability_solution/observability/public/plugin.ts",
@@ -3660,7 +3660,7 @@
"label": "format",
"description": [],
"signature": [
- "(options: { fields: OutputOf JSX.Element"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/assistant_avatar.tsx",
"deprecated": false,
"trackAdoption": false,
"children": [
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.timestamp",
- "type": "string",
- "tags": [],
- "label": "'@timestamp'",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.user",
+ "id": "def-public.AssistantAvatar.$1",
"type": "Object",
"tags": [],
- "label": "user",
+ "label": "{ size = 's', css }",
"description": [],
"signature": [
- "{ id?: string | undefined; name: string; }"
+ "AssistantAvatarProps"
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/assistant_avatar.tsx",
"deprecated": false,
- "trackAdoption": false
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls",
+ "type": "Function",
+ "tags": [],
+ "label": "ChatItemControls",
+ "description": [],
+ "signature": [
+ "({\n error,\n loading,\n canRegenerate,\n canGiveFeedback,\n onFeedbackClick,\n onRegenerateClick,\n onStopGeneratingClick,\n}: { error: any; loading: boolean; canRegenerate: boolean; canGiveFeedback: boolean; onFeedbackClick: (feedback: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.Feedback",
+ "text": "Feedback"
},
+ ") => void; onRegenerateClick: () => void; onStopGeneratingClick: () => void; }) => JSX.Element | null"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.conversation",
+ "id": "def-public.ChatItemControls.$1",
"type": "Object",
"tags": [],
- "label": "conversation",
+ "label": "{\n error,\n loading,\n canRegenerate,\n canGiveFeedback,\n onFeedbackClick,\n onRegenerateClick,\n onStopGeneratingClick,\n}",
"description": [],
- "signature": [
- "{ id: string; title: string; last_updated: string; }"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
"deprecated": false,
- "trackAdoption": false
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.messages",
- "type": "Array",
- "tags": [],
- "label": "messages",
- "description": [],
- "signature": [
+ "trackAdoption": false,
+ "children": [
{
- "pluginId": "observabilityAIAssistant",
- "scope": "common",
- "docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.Message",
- "text": "Message"
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.error",
+ "type": "Any",
+ "tags": [],
+ "label": "error",
+ "description": [],
+ "signature": [
+ "any"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false
},
- "[]"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
- },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.loading",
+ "type": "boolean",
+ "tags": [],
+ "label": "loading",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.canRegenerate",
+ "type": "boolean",
+ "tags": [],
+ "label": "canRegenerate",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.canGiveFeedback",
+ "type": "boolean",
+ "tags": [],
+ "label": "canGiveFeedback",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.onFeedbackClick",
+ "type": "Function",
+ "tags": [],
+ "label": "onFeedbackClick",
+ "description": [],
+ "signature": [
+ "(feedback: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.Feedback",
+ "text": "Feedback"
+ },
+ ") => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.onFeedbackClick.$1",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "feedback",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.Feedback",
+ "text": "Feedback"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.onRegenerateClick",
+ "type": "Function",
+ "tags": [],
+ "label": "onRegenerateClick",
+ "description": [],
+ "signature": [
+ "() => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatItemControls.$1.onStopGeneratingClick",
+ "type": "Function",
+ "tags": [],
+ "label": "onStopGeneratingClick",
+ "description": [],
+ "signature": [
+ "() => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/chat_item_controls.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": []
+ }
+ ]
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ConnectorSelectorBase",
+ "type": "Function",
+ "tags": [],
+ "label": "ConnectorSelectorBase",
+ "description": [],
+ "signature": [
+ "(props: ",
+ "UseGenAIConnectorsResult",
+ ") => JSX.Element"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/connector_selector/connector_selector_base.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.labels",
+ "id": "def-public.ConnectorSelectorBase.$1",
"type": "Object",
"tags": [],
- "label": "labels",
+ "label": "props",
"description": [],
"signature": [
- "{ [x: string]: string; }"
+ "UseGenAIConnectorsResult"
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/connector_selector/connector_selector_base.tsx",
"deprecated": false,
- "trackAdoption": false
- },
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.createStorybookChatService",
+ "type": "Function",
+ "tags": [],
+ "label": "createStorybookChatService",
+ "description": [],
+ "signature": [
+ "() => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantChatService",
+ "text": "ObservabilityAIAssistantChatService"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/storybook_mock.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.createStorybookService",
+ "type": "Function",
+ "tags": [],
+ "label": "createStorybookService",
+ "description": [],
+ "signature": [
+ "() => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantService",
+ "text": "ObservabilityAIAssistantService"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/storybook_mock.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.FailedToLoadResponse",
+ "type": "Function",
+ "tags": [],
+ "label": "FailedToLoadResponse",
+ "description": [],
+ "signature": [
+ "() => JSX.Element"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/message_panel/failed_to_load_response.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.FeedbackButtons",
+ "type": "Function",
+ "tags": [],
+ "label": "FeedbackButtons",
+ "description": [],
+ "signature": [
+ "({ onClickFeedback }: FeedbackButtonsProps) => JSX.Element"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/buttons/feedback_buttons.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.numeric_labels",
+ "id": "def-public.FeedbackButtons.$1",
"type": "Object",
"tags": [],
- "label": "numeric_labels",
+ "label": "{ onClickFeedback }",
"description": [],
"signature": [
- "{ [x: string]: number; }"
+ "FeedbackButtonsProps"
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.namespace",
- "type": "string",
- "tags": [],
- "label": "namespace",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Conversation.public",
- "type": "boolean",
- "tags": [],
- "label": "public",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/buttons/feedback_buttons.tsx",
"deprecated": false,
- "trackAdoption": false
+ "trackAdoption": false,
+ "isRequired": true
}
],
+ "returnComment": [],
"initialIsOpen": false
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry",
- "type": "Interface",
+ "id": "def-public.getAssistantSystemMessage",
+ "type": "Function",
"tags": [],
- "label": "KnowledgeBaseEntry",
+ "label": "getAssistantSystemMessage",
"description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "signature": [
+ "({\n contexts,\n}: { contexts: ",
+ "ContextDefinition",
+ "[]; }) => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/service/get_assistant_system_message.ts",
"deprecated": false,
"trackAdoption": false,
"children": [
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.timestamp",
- "type": "string",
+ "id": "def-public.getAssistantSystemMessage.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "{\n contexts,\n}",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/service/get_assistant_system_message.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.getAssistantSystemMessage.$1.contexts",
+ "type": "Array",
+ "tags": [],
+ "label": "contexts",
+ "description": [],
+ "signature": [
+ "ContextDefinition",
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/service/get_assistant_system_message.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.isSupportedConnectorType",
+ "type": "Function",
+ "tags": [],
+ "label": "isSupportedConnectorType",
+ "description": [],
+ "signature": [
+ "(type: string) => boolean"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/connectors.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.isSupportedConnectorType.$1",
+ "type": "string",
+ "tags": [],
+ "label": "type",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/connectors.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.MessageText",
+ "type": "Function",
+ "tags": [],
+ "label": "MessageText",
+ "description": [],
+ "signature": [
+ "({ loading, content, onActionClick }: Props) => JSX.Element"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/message_panel/message_text.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.MessageText.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "{ loading, content, onActionClick }",
+ "description": [],
+ "signature": [
+ "Props"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/message_panel/message_text.tsx",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.useAbortableAsync",
+ "type": "Function",
+ "tags": [],
+ "label": "useAbortableAsync",
+ "description": [],
+ "signature": [
+ "(fn: ({}: { signal: AbortSignal; }) => T | Promise, deps: any[], options: { clearValueOnNext?: boolean | undefined; defaultValue?: (() => T) | undefined; } | undefined) => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.AbortableAsyncState",
+ "text": "AbortableAsyncState"
+ },
+ ""
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.useAbortableAsync.$1",
+ "type": "Function",
+ "tags": [],
+ "label": "fn",
+ "description": [],
+ "signature": [
+ "({}: { signal: AbortSignal; }) => T | Promise"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.useAbortableAsync.$2",
+ "type": "Array",
+ "tags": [],
+ "label": "deps",
+ "description": [],
+ "signature": [
+ "any[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.useAbortableAsync.$3",
+ "type": "Object",
+ "tags": [],
+ "label": "options",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.useAbortableAsync.$3.clearValueOnNext",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "clearValueOnNext",
+ "description": [],
+ "signature": [
+ "boolean | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.useAbortableAsync.$3.defaultValue",
+ "type": "Function",
+ "tags": [],
+ "label": "defaultValue",
+ "description": [],
+ "signature": [
+ "(() => T) | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": []
+ }
+ ]
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ }
+ ],
+ "interfaces": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Conversation",
+ "type": "Interface",
+ "tags": [],
+ "label": "Conversation",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Conversation.timestamp",
+ "type": "string",
"tags": [],
"label": "'@timestamp'",
"description": [],
@@ -152,46 +581,62 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.id",
- "type": "string",
+ "id": "def-public.Conversation.user",
+ "type": "Object",
"tags": [],
- "label": "id",
+ "label": "user",
"description": [],
+ "signature": [
+ "{ id?: string | undefined; name: string; }"
+ ],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
"deprecated": false,
"trackAdoption": false
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.text",
- "type": "string",
+ "id": "def-public.Conversation.conversation",
+ "type": "Object",
"tags": [],
- "label": "text",
+ "label": "conversation",
"description": [],
+ "signature": [
+ "{ id: string; title: string; last_updated: string; }"
+ ],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
"deprecated": false,
"trackAdoption": false
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.doc_id",
- "type": "string",
+ "id": "def-public.Conversation.messages",
+ "type": "Array",
"tags": [],
- "label": "doc_id",
+ "label": "messages",
"description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
"deprecated": false,
"trackAdoption": false
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.confidence",
- "type": "CompoundType",
+ "id": "def-public.Conversation.labels",
+ "type": "Object",
"tags": [],
- "label": "confidence",
+ "label": "labels",
"description": [],
"signature": [
- "\"medium\" | \"high\" | \"low\""
+ "{ [x: string]: string; }"
],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
"deprecated": false,
@@ -199,18 +644,32 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.is_correction",
- "type": "boolean",
+ "id": "def-public.Conversation.numeric_labels",
+ "type": "Object",
"tags": [],
- "label": "is_correction",
+ "label": "numeric_labels",
"description": [],
+ "signature": [
+ "{ [x: string]: number; }"
+ ],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
"deprecated": false,
"trackAdoption": false
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.public",
+ "id": "def-public.Conversation.namespace",
+ "type": "string",
+ "tags": [],
+ "label": "namespace",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Conversation.public",
"type": "boolean",
"tags": [],
"label": "public",
@@ -218,111 +677,802 @@
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
"deprecated": false,
"trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry",
+ "type": "Interface",
+ "tags": [],
+ "label": "KnowledgeBaseEntry",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.timestamp",
+ "type": "string",
+ "tags": [],
+ "label": "'@timestamp'",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.id",
+ "type": "string",
+ "tags": [],
+ "label": "id",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.text",
+ "type": "string",
+ "tags": [],
+ "label": "text",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.doc_id",
+ "type": "string",
+ "tags": [],
+ "label": "doc_id",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.confidence",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "confidence",
+ "description": [],
+ "signature": [
+ "\"medium\" | \"high\" | \"low\""
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.is_correction",
+ "type": "boolean",
+ "tags": [],
+ "label": "is_correction",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.public",
+ "type": "boolean",
+ "tags": [],
+ "label": "public",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.labels",
+ "type": "Object",
+ "tags": [],
+ "label": "labels",
+ "description": [],
+ "signature": [
+ "Record | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.KnowledgeBaseEntry.role",
+ "type": "Enum",
+ "tags": [],
+ "label": "role",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.KnowledgeBaseEntryRole",
+ "text": "KnowledgeBaseEntryRole"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Message",
+ "type": "Interface",
+ "tags": [],
+ "label": "Message",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Message.timestamp",
+ "type": "string",
+ "tags": [],
+ "label": "'@timestamp'",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Message.message",
+ "type": "Object",
+ "tags": [],
+ "label": "message",
+ "description": [],
+ "signature": [
+ "{ content?: string | undefined; name?: string | undefined; role: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.MessageRole",
+ "text": "MessageRole"
+ },
+ "; function_call?: { name: string; arguments?: string | undefined; trigger: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.MessageRole",
+ "text": "MessageRole"
+ },
+ ".Assistant | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.MessageRole",
+ "text": "MessageRole"
+ },
+ ".User | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.MessageRole",
+ "text": "MessageRole"
+ },
+ ".Elastic; } | undefined; data?: string | undefined; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService",
+ "type": "Interface",
+ "tags": [],
+ "label": "ObservabilityAIAssistantChatService",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.sendAnalyticsEvent",
+ "type": "Function",
+ "tags": [],
+ "label": "sendAnalyticsEvent",
+ "description": [],
+ "signature": [
+ "(event: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.TelemetryEventTypeWithPayload",
+ "text": "TelemetryEventTypeWithPayload"
+ },
+ ") => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.sendAnalyticsEvent.$1",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "event",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.TelemetryEventTypeWithPayload",
+ "text": "TelemetryEventTypeWithPayload"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat",
+ "type": "Function",
+ "tags": [],
+ "label": "chat",
+ "description": [],
+ "signature": [
+ "(name: string, options: { messages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]; connectorId: string; function?: \"none\" | \"auto\" | undefined; signal: AbortSignal; }) => ",
+ "Observable",
+ "<",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventWithoutError",
+ "text": "StreamingChatResponseEventWithoutError"
+ },
+ ">"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat.$1",
+ "type": "string",
+ "tags": [],
+ "label": "name",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat.$2",
+ "type": "Object",
+ "tags": [],
+ "label": "options",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat.$2.messages",
+ "type": "Array",
+ "tags": [],
+ "label": "messages",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat.$2.connectorId",
+ "type": "string",
+ "tags": [],
+ "label": "connectorId",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat.$2.function",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "function",
+ "description": [],
+ "signature": [
+ "\"none\" | \"auto\" | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.chat.$2.signal",
+ "type": "Object",
+ "tags": [],
+ "label": "signal",
+ "description": [],
+ "signature": [
+ "AbortSignal"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ }
+ ],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete",
+ "type": "Function",
+ "tags": [],
+ "label": "complete",
+ "description": [],
+ "signature": [
+ "(options: { screenContexts: ",
+ "ObservabilityAIAssistantScreenContext",
+ "[]; conversationId?: string | undefined; connectorId: string; messages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]; persist: boolean; signal: AbortSignal; responseLanguage: string; }) => ",
+ "Observable",
+ "<",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventWithoutError",
+ "text": "StreamingChatResponseEventWithoutError"
+ },
+ ">"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "options",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.screenContexts",
+ "type": "Array",
+ "tags": [],
+ "label": "screenContexts",
+ "description": [],
+ "signature": [
+ "ObservabilityAIAssistantScreenContext",
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.conversationId",
+ "type": "string",
+ "tags": [],
+ "label": "conversationId",
+ "description": [],
+ "signature": [
+ "string | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.connectorId",
+ "type": "string",
+ "tags": [],
+ "label": "connectorId",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.messages",
+ "type": "Array",
+ "tags": [],
+ "label": "messages",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.persist",
+ "type": "boolean",
+ "tags": [],
+ "label": "persist",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.signal",
+ "type": "Object",
+ "tags": [],
+ "label": "signal",
+ "description": [],
+ "signature": [
+ "AbortSignal"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.complete.$1.responseLanguage",
+ "type": "string",
+ "tags": [],
+ "label": "responseLanguage",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ }
+ ],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.getContexts",
+ "type": "Function",
+ "tags": [],
+ "label": "getContexts",
+ "description": [],
+ "signature": [
+ "() => ",
+ "ContextDefinition",
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.getFunctions",
+ "type": "Function",
+ "tags": [],
+ "label": "getFunctions",
+ "description": [],
+ "signature": [
+ "(options?: { contexts?: string[] | undefined; filter?: string | undefined; } | undefined) => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
+ "<",
+ "CompatibleJSONSchema",
+ ">[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.getFunctions.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "options",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.getFunctions.$1.contexts",
+ "type": "Array",
+ "tags": [],
+ "label": "contexts",
+ "description": [],
+ "signature": [
+ "string[] | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.getFunctions.$1.filter",
+ "type": "string",
+ "tags": [],
+ "label": "filter",
+ "description": [],
+ "signature": [
+ "string | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ }
+ ],
+ "returnComment": []
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.labels",
- "type": "Object",
+ "id": "def-public.ObservabilityAIAssistantChatService.hasFunction",
+ "type": "Function",
"tags": [],
- "label": "labels",
+ "label": "hasFunction",
"description": [],
"signature": [
- "Record | undefined"
+ "(name: string) => boolean"
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
"deprecated": false,
- "trackAdoption": false
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.hasFunction.$1",
+ "type": "string",
+ "tags": [],
+ "label": "name",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.KnowledgeBaseEntry.role",
- "type": "Enum",
+ "id": "def-public.ObservabilityAIAssistantChatService.hasRenderFunction",
+ "type": "Function",
"tags": [],
- "label": "role",
+ "label": "hasRenderFunction",
"description": [],
"signature": [
+ "(name: string) => boolean"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
{
- "pluginId": "observabilityAIAssistant",
- "scope": "common",
- "docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.KnowledgeBaseEntryRole",
- "text": "KnowledgeBaseEntryRole"
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.hasRenderFunction.$1",
+ "type": "string",
+ "tags": [],
+ "label": "name",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
}
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
- }
- ],
- "initialIsOpen": false
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Message",
- "type": "Interface",
- "tags": [],
- "label": "Message",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Message.timestamp",
- "type": "string",
- "tags": [],
- "label": "'@timestamp'",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
+ "returnComment": []
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.Message.message",
- "type": "Object",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction",
+ "type": "Function",
"tags": [],
- "label": "message",
+ "label": "renderFunction",
"description": [],
"signature": [
- "{ content?: string | undefined; name?: string | undefined; role: ",
+ "(name: string, args: string | undefined, response: { data?: string | undefined; content?: string | undefined; }, onActionClick: ",
{
"pluginId": "observabilityAIAssistant",
- "scope": "common",
+ "scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.MessageRole",
- "text": "MessageRole"
+ "section": "def-public.ChatActionClickHandler",
+ "text": "ChatActionClickHandler"
},
- "; function_call?: { name: string; arguments?: string | undefined; trigger: ",
+ ") => React.ReactNode"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
{
- "pluginId": "observabilityAIAssistant",
- "scope": "common",
- "docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.MessageRole",
- "text": "MessageRole"
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction.$1",
+ "type": "string",
+ "tags": [],
+ "label": "name",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
},
- ".Assistant | ",
{
- "pluginId": "observabilityAIAssistant",
- "scope": "common",
- "docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.MessageRole",
- "text": "MessageRole"
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction.$2",
+ "type": "string",
+ "tags": [],
+ "label": "args",
+ "description": [],
+ "signature": [
+ "string | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": false
},
- ".User | ",
{
- "pluginId": "observabilityAIAssistant",
- "scope": "common",
- "docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.MessageRole",
- "text": "MessageRole"
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction.$3",
+ "type": "Object",
+ "tags": [],
+ "label": "response",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction.$3.data",
+ "type": "string",
+ "tags": [],
+ "label": "data",
+ "description": [],
+ "signature": [
+ "string | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction.$3.content",
+ "type": "string",
+ "tags": [],
+ "label": "content",
+ "description": [],
+ "signature": [
+ "string | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
},
- ".Elastic; } | undefined; data?: string | undefined; }"
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantChatService.renderFunction.$4",
+ "type": "Function",
+ "tags": [],
+ "label": "onActionClick",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatActionClickHandler",
+ "text": "ChatActionClickHandler"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
- "deprecated": false,
- "trackAdoption": false
+ "returnComment": []
}
],
"initialIsOpen": false
@@ -338,22 +1488,6 @@
"deprecated": false,
"trackAdoption": false,
"children": [
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantService.isEnabled",
- "type": "Function",
- "tags": [],
- "label": "isEnabled",
- "description": [],
- "signature": [
- "() => boolean"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [],
- "returnComment": []
- },
{
"parentPluginId": "observabilityAIAssistant",
"id": "def-public.ObservabilityAIAssistantService.callApi",
@@ -611,7 +1745,13 @@
"; \"GET /internal/observability_ai_assistant/functions\": { endpoint: \"GET /internal/observability_ai_assistant/functions\"; params?: undefined; handler: ({}: ",
"ObservabilityAIAssistantRouteHandlerResources",
") => Promise<{ functionDefinitions: ",
- "FunctionDefinition",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
"<",
"CompatibleJSONSchema",
">[]; contextDefinitions: ",
@@ -1119,7 +2259,13 @@
"; \"GET /internal/observability_ai_assistant/functions\": { endpoint: \"GET /internal/observability_ai_assistant/functions\"; params?: undefined; handler: ({}: ",
"ObservabilityAIAssistantRouteHandlerResources",
") => Promise<{ functionDefinitions: ",
- "FunctionDefinition",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
"<",
"CompatibleJSONSchema",
">[]; contextDefinitions: ",
@@ -1428,78 +2574,27 @@
{
"pluginId": "@kbn/server-route-repository",
"scope": "common",
- "docId": "kibKbnServerRouteRepositoryPluginApi",
- "section": "def-common.ClientRequestParamsOf",
- "text": "ClientRequestParamsOf"
- },
- " & TAdditionalClientOptions]"
- ],
- "path": "packages/kbn-server-route-repository/src/typings.ts",
- "deprecated": false,
- "trackAdoption": false
- }
- ]
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantService.getCurrentUser",
- "type": "Function",
- "tags": [],
- "label": "getCurrentUser",
- "description": [],
- "signature": [
- "() => Promise<",
- {
- "pluginId": "@kbn/security-plugin-types-common",
- "scope": "common",
- "docId": "kibKbnSecurityPluginTypesCommonPluginApi",
- "section": "def-common.AuthenticatedUser",
- "text": "AuthenticatedUser"
- },
- ">"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [],
- "returnComment": []
- },
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantService.getLicense",
- "type": "Function",
- "tags": [],
- "label": "getLicense",
- "description": [],
- "signature": [
- "() => ",
- "Observable",
- "<",
- "ILicense",
- ">"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [],
- "returnComment": []
+ "docId": "kibKbnServerRouteRepositoryPluginApi",
+ "section": "def-common.ClientRequestParamsOf",
+ "text": "ClientRequestParamsOf"
+ },
+ " & TAdditionalClientOptions]"
+ ],
+ "path": "packages/kbn-server-route-repository/src/typings.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantService.getLicenseManagementLocator",
+ "id": "def-public.ObservabilityAIAssistantService.isEnabled",
"type": "Function",
"tags": [],
- "label": "getLicenseManagementLocator",
+ "label": "isEnabled",
"description": [],
"signature": [
- "() => ",
- {
- "pluginId": "share",
- "scope": "public",
- "docId": "kibSharePluginApi",
- "section": "def-public.SharePublicStart",
- "text": "SharePublicStart"
- }
+ "() => boolean"
],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
"deprecated": false,
@@ -1516,7 +2611,13 @@
"description": [],
"signature": [
"({}: { signal: AbortSignal; }) => Promise<",
- "ObservabilityAIAssistantChatService",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantChatService",
+ "text": "ObservabilityAIAssistantChatService"
+ },
">"
],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
@@ -1638,12 +2739,227 @@
"trackAdoption": false,
"children": [],
"returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantService.conversations",
+ "type": "Object",
+ "tags": [],
+ "label": "conversations",
+ "description": [],
+ "signature": [
+ "ObservabilityAIAssistantConversationService"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult",
+ "type": "Interface",
+ "tags": [],
+ "label": "UseChatResult",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.messages",
+ "type": "Array",
+ "tags": [],
+ "label": "messages",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.setMessages",
+ "type": "Function",
+ "tags": [],
+ "label": "setMessages",
+ "description": [],
+ "signature": [
+ "(messages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]) => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.setMessages.$1",
+ "type": "Array",
+ "tags": [],
+ "label": "messages",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.state",
+ "type": "Enum",
+ "tags": [],
+ "label": "state",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatState",
+ "text": "ChatState"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.next",
+ "type": "Function",
+ "tags": [],
+ "label": "next",
+ "description": [],
+ "signature": [
+ "(messages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]) => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.next.$1",
+ "type": "Array",
+ "tags": [],
+ "label": "messages",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.UseChatResult.stop",
+ "type": "Function",
+ "tags": [],
+ "label": "stop",
+ "description": [],
+ "signature": [
+ "() => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": []
}
],
"initialIsOpen": false
}
],
"enums": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatActionClickType",
+ "type": "Enum",
+ "tags": [],
+ "label": "ChatActionClickType",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatState",
+ "type": "Enum",
+ "tags": [],
+ "label": "ChatState",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.FunctionVisibility",
+ "type": "Enum",
+ "tags": [],
+ "label": "FunctionVisibility",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/function_visibility.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "observabilityAIAssistant",
"id": "def-public.KnowledgeBaseEntryRole",
@@ -1667,9 +2983,48 @@
"deprecated": false,
"trackAdoption": false,
"initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantTelemetryEventType",
+ "type": "Enum",
+ "tags": [],
+ "label": "ObservabilityAIAssistantTelemetryEventType",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/analytics/telemetry_event_type.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.VisualizeESQLUserIntention",
+ "type": "Enum",
+ "tags": [],
+ "label": "VisualizeESQLUserIntention",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/visualize_esql.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
}
],
"misc": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.AbortableAsyncState",
+ "type": "Type",
+ "tags": [],
+ "label": "AbortableAsyncState",
+ "description": [],
+ "signature": [
+ "(T extends Promise ? State : State) & { refresh: () => void; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_abortable_async.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "observabilityAIAssistant",
"id": "def-public.APIReturnType",
@@ -1919,7 +3274,13 @@
"; \"GET /internal/observability_ai_assistant/functions\": { endpoint: \"GET /internal/observability_ai_assistant/functions\"; params?: undefined; handler: ({}: ",
"ObservabilityAIAssistantRouteHandlerResources",
") => Promise<{ functionDefinitions: ",
- "FunctionDefinition",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
"<",
"CompatibleJSONSchema",
">[]; contextDefinitions: ",
@@ -2169,20 +3530,114 @@
" & { params: { body: { name: string; messages: ",
{
"pluginId": "observabilityAIAssistant",
- "scope": "common",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]; connectorId: string; functions: { name: string; description: string; parameters: any; }[]; } & { functionCall?: string | undefined; }; }; }) => Promise<",
+ "Readable",
+ ">; } & ",
+ "ObservabilityAIAssistantRouteCreateOptions",
+ "; }[TEndpoint] extends { endpoint: any; params?: any; handler: ({}: any) => Promise; } & ",
+ "ServerRouteCreateOptions",
+ " ? TReturnType : never"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/api/index.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatActionClickHandler",
+ "type": "Type",
+ "tags": [],
+ "label": "ChatActionClickHandler",
+ "description": [],
+ "signature": [
+ "(payload: ChatActionClickPayloadExecuteEsql) => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatActionClickHandler.$1",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "payload",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatActionClickType",
+ "text": "ChatActionClickType"
+ },
+ "; } & { query: string; userOverrides?: ",
+ {
+ "pluginId": "lens",
+ "scope": "public",
+ "docId": "kibLensPluginApi",
+ "section": "def-public.TypedLensByValueInput",
+ "text": "TypedLensByValueInput"
+ },
+ " | undefined; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ChatActionClickPayload",
+ "type": "Type",
+ "tags": [],
+ "label": "ChatActionClickPayload",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.Message",
- "text": "Message"
+ "section": "def-public.ChatActionClickType",
+ "text": "ChatActionClickType"
},
- "[]; connectorId: string; functions: { name: string; description: string; parameters: any; }[]; } & { functionCall?: string | undefined; }; }; }) => Promise<",
- "Readable",
- ">; } & ",
- "ObservabilityAIAssistantRouteCreateOptions",
- "; }[TEndpoint] extends { endpoint: any; params?: any; handler: ({}: any) => Promise; } & ",
- "ServerRouteCreateOptions",
- " ? TReturnType : never"
+ "; } & { query: string; userOverrides?: ",
+ {
+ "pluginId": "lens",
+ "scope": "public",
+ "docId": "kibLensPluginApi",
+ "section": "def-public.TypedLensByValueInput",
+ "text": "TypedLensByValueInput"
+ },
+ " | undefined; }"
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/api/index.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/chat/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.Feedback",
+ "type": "Type",
+ "tags": [],
+ "label": "Feedback",
+ "description": [],
+ "signature": [
+ "\"negative\" | \"positive\""
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/components/buttons/feedback_buttons.tsx",
"deprecated": false,
"trackAdoption": false,
"initialIsOpen": false
@@ -2436,7 +3891,13 @@
"; \"GET /internal/observability_ai_assistant/functions\": { endpoint: \"GET /internal/observability_ai_assistant/functions\"; params?: undefined; handler: ({}: ",
"ObservabilityAIAssistantRouteHandlerResources",
") => Promise<{ functionDefinitions: ",
- "FunctionDefinition",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
"<",
"CompatibleJSONSchema",
">[]; contextDefinitions: ",
@@ -2734,15 +4195,220 @@
"deprecated": false,
"trackAdoption": false,
"initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.RegisterRenderFunctionDefinition",
+ "type": "Type",
+ "tags": [],
+ "label": "RegisterRenderFunctionDefinition",
+ "description": [],
+ "signature": [
+ "(name: string, render: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.RenderFunction",
+ "text": "RenderFunction"
+ },
+ ") => void"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.RegisterRenderFunctionDefinition.$1",
+ "type": "string",
+ "tags": [],
+ "label": "name",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.RegisterRenderFunctionDefinition.$2",
+ "type": "Function",
+ "tags": [],
+ "label": "render",
+ "description": [],
+ "signature": [
+ "(options: { arguments: TFunctionArguments; response: TFunctionResponse; onActionClick: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatActionClickHandler",
+ "text": "ChatActionClickHandler"
+ },
+ "; }) => React.ReactNode"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.RegisterRenderFunctionDefinition.$2.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "options",
+ "description": [],
+ "signature": [
+ "{ arguments: TArguments; response: TResponse; onActionClick: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatActionClickHandler",
+ "text": "ChatActionClickHandler"
+ },
+ "; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.RenderFunction",
+ "type": "Type",
+ "tags": [],
+ "label": "RenderFunction",
+ "description": [],
+ "signature": [
+ "(options: { arguments: TArguments; response: TResponse; onActionClick: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatActionClickHandler",
+ "text": "ChatActionClickHandler"
+ },
+ "; }) => React.ReactNode"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.RenderFunction.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "options",
+ "description": [],
+ "signature": [
+ "{ arguments: TArguments; response: TResponse; onActionClick: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ChatActionClickHandler",
+ "text": "ChatActionClickHandler"
+ },
+ "; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.TelemetryEventTypeWithPayload",
+ "type": "Type",
+ "tags": [],
+ "label": "TelemetryEventTypeWithPayload",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantTelemetryEventType",
+ "text": "ObservabilityAIAssistantTelemetryEventType"
+ },
+ ".ChatFeedback; payload: ",
+ "ChatFeedback",
+ "; } | { type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantTelemetryEventType",
+ "text": "ObservabilityAIAssistantTelemetryEventType"
+ },
+ ".InsightFeedback; payload: ",
+ "InsightFeedback",
+ "; } | { type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantTelemetryEventType",
+ "text": "ObservabilityAIAssistantTelemetryEventType"
+ },
+ ".UserSentPromptInChat; payload: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/analytics/index.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.VISUALIZE_ESQL_USER_INTENTIONS",
+ "type": "Array",
+ "tags": [],
+ "label": "VISUALIZE_ESQL_USER_INTENTIONS",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.VisualizeESQLUserIntention",
+ "text": "VisualizeESQLUserIntention"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/visualize_esql.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
}
],
"objects": [],
"setup": {
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginSetup",
+ "id": "def-public.ObservabilityAIAssistantPublicSetup",
"type": "Interface",
"tags": [],
- "label": "ObservabilityAIAssistantPluginSetup",
+ "label": "ObservabilityAIAssistantPublicSetup",
"description": [],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
"deprecated": false,
@@ -2753,10 +4419,10 @@
},
"start": {
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginStart",
+ "id": "def-public.ObservabilityAIAssistantPublicStart",
"type": "Interface",
"tags": [],
- "label": "ObservabilityAIAssistantPluginStart",
+ "label": "ObservabilityAIAssistantPublicStart",
"description": [],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
"deprecated": false,
@@ -2764,7 +4430,7 @@
"children": [
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginStart.service",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.service",
"type": "Object",
"tags": [],
"label": "service",
@@ -2784,7 +4450,7 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginStart.ObservabilityAIAssistantContextualInsight",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.ObservabilityAIAssistantContextualInsight",
"type": "CompoundType",
"tags": [],
"label": "ObservabilityAIAssistantContextualInsight",
@@ -2800,21 +4466,37 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginStart.ObservabilityAIAssistantActionMenuItem",
- "type": "CompoundType",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.ObservabilityAIAssistantMultipaneFlyoutContext",
+ "type": "Object",
+ "tags": [],
+ "label": "ObservabilityAIAssistantMultipaneFlyoutContext",
+ "description": [],
+ "signature": [
+ "React.Context<",
+ "ChatFlyoutSecondSlotHandler",
+ " | undefined>"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.ObservabilityAIAssistantChatServiceContext",
+ "type": "Object",
"tags": [],
- "label": "ObservabilityAIAssistantActionMenuItem",
+ "label": "ObservabilityAIAssistantChatServiceContext",
"description": [],
"signature": [
- "React.ForwardRefExoticComponent & ",
+ "React.Context<",
{
- "pluginId": "@kbn/shared-ux-utility",
- "scope": "common",
- "docId": "kibKbnSharedUxUtilityPluginApi",
- "section": "def-common.WithSuspenseExtendedDeps",
- "text": "WithSuspenseExtendedDeps"
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantChatService",
+ "text": "ObservabilityAIAssistantChatService"
},
- ", \"key\" | \"css\" | \"analytics\"> & React.RefAttributes<{}>> | null"
+ " | undefined>"
],
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
"deprecated": false,
@@ -2822,7 +4504,30 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginStart.useGenAIConnectors",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.useObservabilityAIAssistantChatService",
+ "type": "Function",
+ "tags": [],
+ "label": "useObservabilityAIAssistantChatService",
+ "description": [],
+ "signature": [
+ "() => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantChatService",
+ "text": "ObservabilityAIAssistantChatService"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.useGenAIConnectors",
"type": "Function",
"tags": [],
"label": "useGenAIConnectors",
@@ -2839,7 +4544,95 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-public.ObservabilityAIAssistantPluginStart.useUserPreferredLanguage",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.useChat",
+ "type": "Function",
+ "tags": [],
+ "label": "useChat",
+ "description": [],
+ "signature": [
+ "(props: ",
+ "UseChatProps",
+ ") => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.UseChatResult",
+ "text": "UseChatResult"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.useChat.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "props",
+ "description": [],
+ "signature": [
+ "{ connectorId?: string | undefined; service: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantService",
+ "text": "ObservabilityAIAssistantService"
+ },
+ "; initialMessages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]; initialConversationId?: string | undefined; chatService: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "public",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-public.ObservabilityAIAssistantChatService",
+ "text": "ObservabilityAIAssistantChatService"
+ },
+ "; persist: boolean; onConversationUpdate?: ((event: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ConversationCreateEvent",
+ "text": "ConversationCreateEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ConversationUpdateEvent",
+ "text": "ConversationUpdateEvent"
+ },
+ ") => void) | undefined; onChatComplete?: ((messages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]) => void) | undefined; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/hooks/use_chat.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.useUserPreferredLanguage",
"type": "Function",
"tags": [],
"label": "useUserPreferredLanguage",
@@ -2850,7 +4643,67 @@
"path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
"deprecated": false,
"trackAdoption": false,
- "children": [],
+ "children": [],
+ "returnComment": []
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.getContextualInsightMessages",
+ "type": "Function",
+ "tags": [],
+ "label": "getContextualInsightMessages",
+ "description": [],
+ "signature": [
+ "({}: { message: string; instructions: string; }) => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.getContextualInsightMessages.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "{}",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.getContextualInsightMessages.$1.message",
+ "type": "string",
+ "tags": [],
+ "label": "message",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-public.ObservabilityAIAssistantPublicStart.getContextualInsightMessages.$1.instructions",
+ "type": "string",
+ "tags": [],
+ "label": "instructions",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/public/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ]
+ }
+ ],
"returnComment": []
}
],
@@ -3113,7 +4966,13 @@
"; \"GET /internal/observability_ai_assistant/functions\": { endpoint: \"GET /internal/observability_ai_assistant/functions\"; params?: undefined; handler: ({}: ",
"ObservabilityAIAssistantRouteHandlerResources",
") => Promise<{ functionDefinitions: ",
- "FunctionDefinition",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
"<",
"CompatibleJSONSchema",
">[]; contextDefinitions: ",
@@ -3339,114 +5198,491 @@
"pluginId": "observabilityAIAssistant",
"scope": "common",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.Message",
- "text": "Message"
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ ", unknown>>; connectorId: ",
+ "StringC",
+ "; functions: ",
+ "ArrayC",
+ "<",
+ "TypeC",
+ "<{ name: ",
+ "StringC",
+ "; description: ",
+ "StringC",
+ "; parameters: ",
+ "AnyC",
+ "; }>>; }>, ",
+ "PartialC",
+ "<{ functionCall: ",
+ "StringC",
+ "; }>]>; }> | undefined; handler: ({}: ",
+ "ObservabilityAIAssistantRouteHandlerResources",
+ " & { params: { body: { name: string; messages: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "[]; connectorId: string; functions: { name: string; description: string; parameters: any; }[]; } & { functionCall?: string | undefined; }; }; }) => Promise<",
+ "Readable",
+ ">; } & ",
+ "ObservabilityAIAssistantRouteCreateOptions",
+ "; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/routes/get_global_observability_ai_assistant_route_repository.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-server.RegistrationCallback",
+ "type": "Type",
+ "tags": [],
+ "label": "RegistrationCallback",
+ "description": [],
+ "signature": [
+ "({}: { signal: AbortSignal; resources: ",
+ "RespondFunctionResources",
+ "; client: ",
+ "ObservabilityAIAssistantClient",
+ "; functions: ",
+ "ChatFunctionClient",
+ "; }) => Promise"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/service/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "returnComment": [],
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-server.RegistrationCallback.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "__0",
+ "description": [],
+ "signature": [
+ "{ signal: AbortSignal; resources: ",
+ "RespondFunctionResources",
+ "; client: ",
+ "ObservabilityAIAssistantClient",
+ "; functions: ",
+ "ChatFunctionClient",
+ "; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/service/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ }
+ ],
+ "objects": [],
+ "start": {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-server.ObservabilityAIAssistantServerStart",
+ "type": "Interface",
+ "tags": [],
+ "label": "ObservabilityAIAssistantServerStart",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-server.ObservabilityAIAssistantServerStart.service",
+ "type": "Object",
+ "tags": [],
+ "label": "service",
+ "description": [
+ "\nReturns a Observability AI Assistant service instance"
+ ],
+ "signature": [
+ "ObservabilityAIAssistantService"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "lifecycle": "start",
+ "initialIsOpen": true
+ },
+ "setup": {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-server.ObservabilityAIAssistantServerSetup",
+ "type": "Interface",
+ "tags": [],
+ "label": "ObservabilityAIAssistantServerSetup",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-server.ObservabilityAIAssistantServerSetup.service",
+ "type": "Object",
+ "tags": [],
+ "label": "service",
+ "description": [
+ "\nReturns a Observability AI Assistant service instance"
+ ],
+ "signature": [
+ "ObservabilityAIAssistantService"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "lifecycle": "setup",
+ "initialIsOpen": true
+ }
+ },
+ "common": {
+ "classes": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionError",
+ "type": "Class",
+ "tags": [],
+ "label": "ChatCompletionError",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionError",
+ "text": "ChatCompletionError"
+ },
+ " extends Error"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionError.Unnamed",
+ "type": "Function",
+ "tags": [],
+ "label": "Constructor",
+ "description": [],
+ "signature": [
+ "any"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionError.Unnamed.$1",
+ "type": "Uncategorized",
+ "tags": [],
+ "label": "code",
+ "description": [],
+ "signature": [
+ "T"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionError.Unnamed.$2",
+ "type": "string",
+ "tags": [],
+ "label": "message",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionError.Unnamed.$3",
+ "type": "Uncategorized",
+ "tags": [],
+ "label": "meta",
+ "description": [],
+ "signature": [
+ "ErrorMetaAttributes[T] | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": false
+ }
+ ],
+ "returnComment": []
+ }
+ ],
+ "initialIsOpen": false
+ }
+ ],
+ "functions": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.createConversationNotFoundError",
+ "type": "Function",
+ "tags": [],
+ "label": "createConversationNotFoundError",
+ "description": [],
+ "signature": [
+ "() => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionError",
+ "text": "ChatCompletionError"
+ },
+ "<",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionErrorCode",
+ "text": "ChatCompletionErrorCode"
+ },
+ ".NotFoundError>"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.createInternalServerError",
+ "type": "Function",
+ "tags": [],
+ "label": "createInternalServerError",
+ "description": [],
+ "signature": [
+ "(originalErrorMessage: string) => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionError",
+ "text": "ChatCompletionError"
+ },
+ "<",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionErrorCode",
+ "text": "ChatCompletionErrorCode"
+ },
+ ".InternalError>"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.createInternalServerError.$1",
+ "type": "string",
+ "tags": [],
+ "label": "originalErrorMessage",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.createTokenLimitReachedError",
+ "type": "Function",
+ "tags": [],
+ "label": "createTokenLimitReachedError",
+ "description": [],
+ "signature": [
+ "(tokenLimit: number | undefined, tokenCount: number | undefined) => ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionError",
+ "text": "ChatCompletionError"
},
- ", unknown>>; connectorId: ",
- "StringC",
- "; functions: ",
- "ArrayC",
"<",
- "TypeC",
- "<{ name: ",
- "StringC",
- "; description: ",
- "StringC",
- "; parameters: ",
- "AnyC",
- "; }>>; }>, ",
- "PartialC",
- "<{ functionCall: ",
- "StringC",
- "; }>]>; }> | undefined; handler: ({}: ",
- "ObservabilityAIAssistantRouteHandlerResources",
- " & { params: { body: { name: string; messages: ",
{
"pluginId": "observabilityAIAssistant",
"scope": "common",
"docId": "kibObservabilityAIAssistantPluginApi",
- "section": "def-common.Message",
- "text": "Message"
+ "section": "def-common.ChatCompletionErrorCode",
+ "text": "ChatCompletionErrorCode"
},
- "[]; connectorId: string; functions: { name: string; description: string; parameters: any; }[]; } & { functionCall?: string | undefined; }; }; }) => Promise<",
- "Readable",
- ">; } & ",
- "ObservabilityAIAssistantRouteCreateOptions",
- "; }"
+ ".TokenLimitReachedError>"
],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/routes/get_global_observability_ai_assistant_route_repository.ts",
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.createTokenLimitReachedError.$1",
+ "type": "number",
+ "tags": [],
+ "label": "tokenLimit",
+ "description": [],
+ "signature": [
+ "number | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.createTokenLimitReachedError.$2",
+ "type": "number",
+ "tags": [],
+ "label": "tokenCount",
+ "description": [],
+ "signature": [
+ "number | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": false
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.isChatCompletionError",
+ "type": "Function",
+ "tags": [],
+ "label": "isChatCompletionError",
+ "description": [],
+ "signature": [
+ "(error: Error) => boolean"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.isChatCompletionError.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "error",
+ "description": [],
+ "signature": [
+ "Error"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.isSupportedConnectorType",
+ "type": "Function",
+ "tags": [],
+ "label": "isSupportedConnectorType",
+ "description": [],
+ "signature": [
+ "(type: string) => boolean"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/connectors.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.isSupportedConnectorType.$1",
+ "type": "string",
+ "tags": [],
+ "label": "type",
+ "description": [],
+ "signature": [
+ "string"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/connectors.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.isTokenLimitReachedError",
+ "type": "Function",
+ "tags": [],
+ "label": "isTokenLimitReachedError",
+ "description": [],
+ "signature": [
+ "(error: Error) => boolean"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
"deprecated": false,
"trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.isTokenLimitReachedError.$1",
+ "type": "Object",
+ "tags": [],
+ "label": "error",
+ "description": [],
+ "signature": [
+ "Error"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "isRequired": true
+ }
+ ],
+ "returnComment": [],
"initialIsOpen": false
}
],
- "objects": [],
- "start": {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-server.ObservabilityAIAssistantPluginStart",
- "type": "Interface",
- "tags": [],
- "label": "ObservabilityAIAssistantPluginStart",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-server.ObservabilityAIAssistantPluginStart.service",
- "type": "Object",
- "tags": [],
- "label": "service",
- "description": [
- "\nReturns a Observability AI Assistant service instance"
- ],
- "signature": [
- "ObservabilityAIAssistantService"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
- "deprecated": false,
- "trackAdoption": false
- }
- ],
- "lifecycle": "start",
- "initialIsOpen": true
- },
- "setup": {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-server.ObservabilityAIAssistantPluginSetup",
- "type": "Interface",
- "tags": [],
- "label": "ObservabilityAIAssistantPluginSetup",
- "description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
- "deprecated": false,
- "trackAdoption": false,
- "children": [
- {
- "parentPluginId": "observabilityAIAssistant",
- "id": "def-server.ObservabilityAIAssistantPluginSetup.service",
- "type": "Object",
- "tags": [],
- "label": "service",
- "description": [
- "\nReturns a Observability AI Assistant service instance"
- ],
- "signature": [
- "ObservabilityAIAssistantService"
- ],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/server/types.ts",
- "deprecated": false,
- "trackAdoption": false
- }
- ],
- "lifecycle": "setup",
- "initialIsOpen": true
- }
- },
- "common": {
- "classes": [],
- "functions": [],
"interfaces": [
{
"parentPluginId": "observabilityAIAssistant",
@@ -3560,12 +5796,121 @@
},
{
"parentPluginId": "observabilityAIAssistant",
- "id": "def-common.Conversation.public",
- "type": "boolean",
+ "id": "def-common.Conversation.public",
+ "type": "boolean",
+ "tags": [],
+ "label": "public",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ }
+ ],
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition",
+ "type": "Interface",
+ "tags": [],
+ "label": "FunctionDefinition",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionDefinition",
+ "text": "FunctionDefinition"
+ },
+ ""
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition.name",
+ "type": "string",
+ "tags": [],
+ "label": "name",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition.description",
+ "type": "string",
+ "tags": [],
+ "label": "description",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition.visibility",
+ "type": "CompoundType",
+ "tags": [],
+ "label": "visibility",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.FunctionVisibility",
+ "text": "FunctionVisibility"
+ },
+ " | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition.descriptionForUser",
+ "type": "string",
+ "tags": [],
+ "label": "descriptionForUser",
+ "description": [],
+ "signature": [
+ "string | undefined"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition.parameters",
+ "type": "Uncategorized",
+ "tags": [],
+ "label": "parameters",
+ "description": [],
+ "signature": [
+ "TParameters"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
+ "deprecated": false,
+ "trackAdoption": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionDefinition.contexts",
+ "type": "Array",
"tags": [],
- "label": "public",
+ "label": "contexts",
"description": [],
- "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "signature": [
+ "string[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/types.ts",
"deprecated": false,
"trackAdoption": false
}
@@ -3773,6 +6118,30 @@
}
],
"enums": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionErrorCode",
+ "type": "Enum",
+ "tags": [],
+ "label": "ChatCompletionErrorCode",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.FunctionVisibility",
+ "type": "Enum",
+ "tags": [],
+ "label": "FunctionVisibility",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/function_visibility.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
{
"parentPluginId": "observabilityAIAssistant",
"id": "def-common.KnowledgeBaseEntryRole",
@@ -3796,9 +6165,331 @@
"deprecated": false,
"trackAdoption": false,
"initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.StreamingChatResponseEventType",
+ "type": "Enum",
+ "tags": [],
+ "label": "StreamingChatResponseEventType",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.VisualizeESQLUserIntention",
+ "type": "Enum",
+ "tags": [],
+ "label": "VisualizeESQLUserIntention",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/visualize_esql.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ }
+ ],
+ "misc": [
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.BufferFlushEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "BufferFlushEvent",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventType",
+ "text": "StreamingChatResponseEventType"
+ },
+ ".BufferFlush; } & { data?: string | undefined; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionChunkEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "ChatCompletionChunkEvent",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventType",
+ "text": "StreamingChatResponseEventType"
+ },
+ ".ChatCompletionChunk; } & { id: string; message: { content?: string | undefined; function_call?: { name?: string | undefined; arguments?: string | undefined; } | undefined; }; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ChatCompletionErrorEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "ChatCompletionErrorEvent",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventType",
+ "text": "StreamingChatResponseEventType"
+ },
+ ".ChatCompletionError; } & { error: { message: string; stack?: string | undefined; code?: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionErrorCode",
+ "text": "ChatCompletionErrorCode"
+ },
+ " | undefined; meta?: Record | undefined; }; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ConversationCreateEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "ConversationCreateEvent",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventType",
+ "text": "StreamingChatResponseEventType"
+ },
+ ".ConversationCreate; } & { conversation: { id: string; title: string; last_updated: string; }; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ConversationCreateRequest",
+ "type": "Type",
+ "tags": [],
+ "label": "ConversationCreateRequest",
+ "description": [],
+ "signature": [
+ "Omit<",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Conversation",
+ "text": "Conversation"
+ },
+ ", \"namespace\" | \"user\" | \"conversation\"> & { conversation: { title: string; }; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.ConversationUpdateEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "ConversationUpdateEvent",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventType",
+ "text": "StreamingChatResponseEventType"
+ },
+ ".ConversationUpdate; } & { conversation: { id: string; title: string; last_updated: string; }; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.MessageAddEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "MessageAddEvent",
+ "description": [],
+ "signature": [
+ "{ type: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.StreamingChatResponseEventType",
+ "text": "StreamingChatResponseEventType"
+ },
+ ".MessageAdd; } & { message: ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.Message",
+ "text": "Message"
+ },
+ "; id: string; }"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.StreamingChatResponseEvent",
+ "type": "Type",
+ "tags": [],
+ "label": "StreamingChatResponseEvent",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ConversationCreateEvent",
+ "text": "ConversationCreateEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ConversationUpdateEvent",
+ "text": "ConversationUpdateEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionChunkEvent",
+ "text": "ChatCompletionChunkEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.MessageAddEvent",
+ "text": "MessageAddEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionErrorEvent",
+ "text": "ChatCompletionErrorEvent"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.StreamingChatResponseEventWithoutError",
+ "type": "Type",
+ "tags": [],
+ "label": "StreamingChatResponseEventWithoutError",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ConversationCreateEvent",
+ "text": "ConversationCreateEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ConversationUpdateEvent",
+ "text": "ConversationUpdateEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.ChatCompletionChunkEvent",
+ "text": "ChatCompletionChunkEvent"
+ },
+ " | ",
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.MessageAddEvent",
+ "text": "MessageAddEvent"
+ }
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/conversation_complete.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
+ },
+ {
+ "parentPluginId": "observabilityAIAssistant",
+ "id": "def-common.VISUALIZE_ESQL_USER_INTENTIONS",
+ "type": "Array",
+ "tags": [],
+ "label": "VISUALIZE_ESQL_USER_INTENTIONS",
+ "description": [],
+ "signature": [
+ {
+ "pluginId": "observabilityAIAssistant",
+ "scope": "common",
+ "docId": "kibObservabilityAIAssistantPluginApi",
+ "section": "def-common.VisualizeESQLUserIntention",
+ "text": "VisualizeESQLUserIntention"
+ },
+ "[]"
+ ],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant/common/functions/visualize_esql.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "initialIsOpen": false
}
],
- "misc": [],
"objects": []
}
}
\ No newline at end of file
diff --git a/api_docs/observability_a_i_assistant.mdx b/api_docs/observability_a_i_assistant.mdx
index 8f37b579ab86..ac39ba31380c 100644
--- a/api_docs/observability_a_i_assistant.mdx
+++ b/api_docs/observability_a_i_assistant.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/observabilityAIAssistant
title: "observabilityAIAssistant"
image: https://source.unsplash.com/400x175/?github
description: API docs for the observabilityAIAssistant plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'observabilityAIAssistant']
---
import observabilityAIAssistantObj from './observability_a_i_assistant.devdocs.json';
@@ -21,7 +21,7 @@ Contact [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-
| Public API count | Any count | Items lacking comments | Missing exports |
|-------------------|-----------|------------------------|-----------------|
-| 79 | 0 | 77 | 14 |
+| 218 | 1 | 216 | 21 |
## Client
@@ -31,6 +31,9 @@ Contact [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-
### Start
+### Functions
+
+
### Interfaces
@@ -53,9 +56,18 @@ Contact [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-
## Common
+### Functions
+
+
+### Classes
+
+
### Interfaces
### Enums
+### Consts, variables and types
+
+
diff --git a/api_docs/observability_a_i_assistant_app.devdocs.json b/api_docs/observability_a_i_assistant_app.devdocs.json
new file mode 100644
index 000000000000..b03a7f23f96d
--- /dev/null
+++ b/api_docs/observability_a_i_assistant_app.devdocs.json
@@ -0,0 +1,55 @@
+{
+ "id": "observabilityAIAssistantApp",
+ "client": {
+ "classes": [],
+ "functions": [],
+ "interfaces": [],
+ "enums": [],
+ "misc": [],
+ "objects": []
+ },
+ "server": {
+ "classes": [],
+ "functions": [],
+ "interfaces": [],
+ "enums": [],
+ "misc": [],
+ "objects": [],
+ "start": {
+ "parentPluginId": "observabilityAIAssistantApp",
+ "id": "def-server.ObservabilityAIAssistantAppServerStart",
+ "type": "Interface",
+ "tags": [],
+ "label": "ObservabilityAIAssistantAppServerStart",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant_app/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "lifecycle": "start",
+ "initialIsOpen": true
+ },
+ "setup": {
+ "parentPluginId": "observabilityAIAssistantApp",
+ "id": "def-server.ObservabilityAIAssistantAppServerSetup",
+ "type": "Interface",
+ "tags": [],
+ "label": "ObservabilityAIAssistantAppServerSetup",
+ "description": [],
+ "path": "x-pack/plugins/observability_solution/observability_ai_assistant_app/server/types.ts",
+ "deprecated": false,
+ "trackAdoption": false,
+ "children": [],
+ "lifecycle": "setup",
+ "initialIsOpen": true
+ }
+ },
+ "common": {
+ "classes": [],
+ "functions": [],
+ "interfaces": [],
+ "enums": [],
+ "misc": [],
+ "objects": []
+ }
+}
\ No newline at end of file
diff --git a/api_docs/observability_a_i_assistant_app.mdx b/api_docs/observability_a_i_assistant_app.mdx
new file mode 100644
index 000000000000..901d4e2c9c81
--- /dev/null
+++ b/api_docs/observability_a_i_assistant_app.mdx
@@ -0,0 +1,33 @@
+---
+####
+#### This document is auto-generated and is meant to be viewed inside our experimental, new docs system.
+#### Reach out in #docs-engineering for more info.
+####
+id: kibObservabilityAIAssistantAppPluginApi
+slug: /kibana-dev-docs/api/observabilityAIAssistantApp
+title: "observabilityAIAssistantApp"
+image: https://source.unsplash.com/400x175/?github
+description: API docs for the observabilityAIAssistantApp plugin
+date: 2024-03-13
+tags: ['contributor', 'dev', 'apidocs', 'kibana', 'observabilityAIAssistantApp']
+---
+import observabilityAIAssistantAppObj from './observability_a_i_assistant_app.devdocs.json';
+
+
+
+Contact [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) for questions regarding this plugin.
+
+**Code health stats**
+
+| Public API count | Any count | Items lacking comments | Missing exports |
+|-------------------|-----------|------------------------|-----------------|
+| 2 | 0 | 2 | 0 |
+
+## Server
+
+### Setup
+
+
+### Start
+
+
diff --git a/api_docs/observability_logs_explorer.mdx b/api_docs/observability_logs_explorer.mdx
index 87553cebdcc9..bed4f705a6de 100644
--- a/api_docs/observability_logs_explorer.mdx
+++ b/api_docs/observability_logs_explorer.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/observabilityLogsExplorer
title: "observabilityLogsExplorer"
image: https://source.unsplash.com/400x175/?github
description: API docs for the observabilityLogsExplorer plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'observabilityLogsExplorer']
---
import observabilityLogsExplorerObj from './observability_logs_explorer.devdocs.json';
diff --git a/api_docs/observability_onboarding.mdx b/api_docs/observability_onboarding.mdx
index 0a5f2a229c49..9304c7751f62 100644
--- a/api_docs/observability_onboarding.mdx
+++ b/api_docs/observability_onboarding.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/observabilityOnboarding
title: "observabilityOnboarding"
image: https://source.unsplash.com/400x175/?github
description: API docs for the observabilityOnboarding plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'observabilityOnboarding']
---
import observabilityOnboardingObj from './observability_onboarding.devdocs.json';
diff --git a/api_docs/observability_shared.mdx b/api_docs/observability_shared.mdx
index 3aa6d03072e5..b0b5b87e7d52 100644
--- a/api_docs/observability_shared.mdx
+++ b/api_docs/observability_shared.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/observabilityShared
title: "observabilityShared"
image: https://source.unsplash.com/400x175/?github
description: API docs for the observabilityShared plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'observabilityShared']
---
import observabilitySharedObj from './observability_shared.devdocs.json';
diff --git a/api_docs/osquery.devdocs.json b/api_docs/osquery.devdocs.json
index 02d9f62e0978..e3de3dbf5b36 100644
--- a/api_docs/osquery.devdocs.json
+++ b/api_docs/osquery.devdocs.json
@@ -301,7 +301,7 @@
"label": "createActionService",
"description": [],
"signature": [
- "{ create: (params: { agent_ids?: string[] | undefined; agent_all?: boolean | undefined; agent_platforms?: string[] | undefined; agent_policy_ids?: string[] | undefined; query?: string | undefined; queries?: { id: string; query: string; ecs_mapping: { [x: string]: { field?: string | undefined; value?: string | string[] | undefined; }; } | undefined; version: string | undefined; platform: string | undefined; removed: boolean | undefined; snapshot: boolean | undefined; }[] | undefined; saved_query_id?: string | undefined; timeout?: number | undefined; ecs_mapping?: { [x: string]: { field?: string | undefined; value?: string | string[] | undefined; }; } | undefined; pack_id?: string | undefined; alert_ids?: string[] | undefined; case_ids?: string[] | undefined; event_ids?: string[] | undefined; metadata?: object | undefined; }, alertData?: OutputOf public API | Number of teams |
|--------------|----------|------------------------|
-| 753 | 645 | 40 |
+| 754 | 646 | 40 |
### Public API health stats
| API Count | Any Count | Missing comments | Missing exports |
|--------------|----------|-----------------|--------|
-| 45408 | 232 | 34331 | 1760 |
+| 45561 | 233 | 34484 | 1771 |
## Plugin Directory
| Plugin name | Maintaining team | Description | API Cnt | Any Cnt | Missing
comments | Missing
exports |
|--------------|----------------|-----------|--------------|----------|---------------|--------|
-| | [@elastic/response-ops](https://github.com/orgs/elastic/teams/response-ops) | - | 279 | 0 | 273 | 31 |
+| | [@elastic/response-ops](https://github.com/orgs/elastic/teams/response-ops) | - | 281 | 0 | 275 | 31 |
| | [@elastic/appex-sharedux @elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/appex-sharedux ) | - | 2 | 0 | 2 | 0 |
| | [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) | - | 2 | 0 | 2 | 0 |
| | [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) | - | 2 | 0 | 2 | 0 |
@@ -51,7 +51,7 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | [@elastic/kibana-cloud-security-posture](https://github.com/orgs/elastic/teams/kibana-cloud-security-posture) | The cloud security posture plugin | 14 | 0 | 2 | 2 |
| | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 32 | 0 | 24 | 0 |
| | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | Content management app | 149 | 0 | 125 | 6 |
-| | [@elastic/kibana-presentation](https://github.com/orgs/elastic/teams/kibana-presentation) | The Controls Plugin contains embeddable components intended to create a simple query interface for end users, and a powerful editing suite that allows dashboard authors to build controls | 332 | 0 | 324 | 16 |
+| | [@elastic/kibana-presentation](https://github.com/orgs/elastic/teams/kibana-presentation) | The Controls Plugin contains embeddable components intended to create a simple query interface for end users, and a powerful editing suite that allows dashboard authors to build controls | 340 | 0 | 332 | 20 |
| crossClusterReplication | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 0 | 0 | 0 | 0 |
| customBranding | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | Enables customization of Kibana | 0 | 0 | 0 | 0 |
| | [@elastic/fleet](https://github.com/orgs/elastic/teams/fleet) | Add custom data integrations so they can be displayed in the Fleet integrations app | 271 | 0 | 252 | 1 |
@@ -108,7 +108,7 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | [@elastic/kibana-core](https://github.com/orgs/elastic/teams/kibana-core) | - | 151 | 0 | 111 | 1 |
| | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | Image embeddable | 3 | 0 | 3 | 1 |
| | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 4 | 0 | 4 | 0 |
-| | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 225 | 0 | 220 | 3 |
+| | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 224 | 0 | 219 | 3 |
| | [@elastic/obs-ux-logs-team](https://github.com/orgs/elastic/teams/obs-ux-logs-team) | This plugin visualizes data from Filebeat and Metricbeat, and integrates with other Observability solutions | 37 | 0 | 34 | 6 |
| | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 4 | 0 | 4 | 0 |
| inputControlVis | [@elastic/kibana-presentation](https://github.com/orgs/elastic/teams/kibana-presentation) | Adds Input Control visualization to Kibana | 0 | 0 | 0 | 0 |
@@ -129,7 +129,7 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | [@elastic/obs-ux-logs-team](https://github.com/orgs/elastic/teams/obs-ux-logs-team) | Exposes the shared components and APIs to access and visualize logs. | 302 | 0 | 276 | 32 |
| logstash | [@elastic/logstash](https://github.com/orgs/elastic/teams/logstash) | - | 0 | 0 | 0 | 0 |
| | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 45 | 0 | 45 | 7 |
-| | [@elastic/kibana-gis](https://github.com/orgs/elastic/teams/kibana-gis) | - | 261 | 0 | 260 | 28 |
+| | [@elastic/kibana-gis](https://github.com/orgs/elastic/teams/kibana-gis) | - | 264 | 0 | 263 | 28 |
| | [@elastic/kibana-gis](https://github.com/orgs/elastic/teams/kibana-gis) | - | 60 | 0 | 60 | 0 |
| | [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) | Exposes utilities for accessing metrics data | 104 | 8 | 104 | 6 |
| | [@elastic/ml-ui](https://github.com/orgs/elastic/teams/ml-ui) | This plugin provides access to the machine learning features provided by Elastic. | 151 | 3 | 65 | 96 |
@@ -141,7 +141,8 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | - | 3 | 0 | 3 | 0 |
| | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | - | 2 | 0 | 2 | 1 |
| | [@elastic/obs-ux-management-team](https://github.com/orgs/elastic/teams/obs-ux-management-team) | - | 651 | 2 | 642 | 17 |
-| | [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) | - | 79 | 0 | 77 | 14 |
+| | [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) | - | 218 | 1 | 216 | 21 |
+| | [@elastic/obs-knowledge-team](https://github.com/orgs/elastic/teams/obs-knowledge-team) | - | 2 | 0 | 2 | 0 |
| | [@elastic/obs-ux-logs-team](https://github.com/orgs/elastic/teams/obs-ux-logs-team) | This plugin exposes and registers observability log consumption features. | 21 | 0 | 21 | 1 |
| | [@elastic/obs-ux-logs-team](https://github.com/orgs/elastic/teams/obs-ux-logs-team) | - | 14 | 0 | 14 | 0 |
| | [@elastic/observability-ui](https://github.com/orgs/elastic/teams/observability-ui) | - | 330 | 1 | 325 | 20 |
@@ -166,7 +167,7 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | [@elastic/kibana-reporting-services](https://github.com/orgs/elastic/teams/kibana-reporting-services) | Kibana Screenshotting Plugin | 32 | 0 | 8 | 4 |
| searchprofiler | [@elastic/platform-deployment-management](https://github.com/orgs/elastic/teams/platform-deployment-management) | - | 0 | 0 | 0 | 0 |
| | [@elastic/kibana-security](https://github.com/orgs/elastic/teams/kibana-security) | This plugin provides authentication and authorization features, and exposes functionality to understand the capabilities of the currently authenticated user. | 404 | 0 | 198 | 2 |
-| | [@elastic/security-solution](https://github.com/orgs/elastic/teams/security-solution) | - | 194 | 0 | 124 | 37 |
+| | [@elastic/security-solution](https://github.com/orgs/elastic/teams/security-solution) | - | 193 | 0 | 123 | 37 |
| | [@elastic/security-solution](https://github.com/orgs/elastic/teams/security-solution) | ESS customizations for Security Solution. | 6 | 0 | 6 | 0 |
| | [@elastic/security-solution](https://github.com/orgs/elastic/teams/security-solution) | Serverless customizations for security. | 7 | 0 | 7 | 0 |
| | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | The core Serverless plugin, providing APIs to Serverless Project plugins. | 21 | 0 | 20 | 0 |
@@ -585,7 +586,7 @@ tags: ['contributor', 'dev', 'apidocs', 'kibana']
| | [@elastic/kibana-operations](https://github.com/orgs/elastic/teams/kibana-operations) | - | 13 | 2 | 8 | 0 |
| | [@elastic/obs-ux-logs-team](https://github.com/orgs/elastic/teams/obs-ux-logs-team) | - | 2 | 0 | 1 | 0 |
| | [@elastic/response-ops](https://github.com/orgs/elastic/teams/response-ops) | - | 16 | 0 | 16 | 1 |
-| | [@elastic/security-detections-response](https://github.com/orgs/elastic/teams/security-detections-response) | - | 122 | 0 | 119 | 0 |
+| | [@elastic/security-detections-response](https://github.com/orgs/elastic/teams/security-detections-response) | - | 123 | 0 | 120 | 0 |
| | [@elastic/appex-sharedux](https://github.com/orgs/elastic/teams/appex-sharedux) | - | 2 | 0 | 2 | 0 |
| | [@elastic/enterprise-search-frontend](https://github.com/orgs/elastic/teams/enterprise-search-frontend) | - | 76 | 0 | 76 | 0 |
| | [@elastic/enterprise-search-frontend](https://github.com/orgs/elastic/teams/enterprise-search-frontend) | - | 3151 | 0 | 3151 | 0 |
diff --git a/api_docs/presentation_panel.devdocs.json b/api_docs/presentation_panel.devdocs.json
index c876b5f958af..e7b0612a17d0 100644
--- a/api_docs/presentation_panel.devdocs.json
+++ b/api_docs/presentation_panel.devdocs.json
@@ -606,7 +606,7 @@
},
"<",
"PanelCompatibleComponent",
- ">; }"
+ " | null>; }"
],
"path": "src/plugins/presentation_panel/public/panel_component/types.ts",
"deprecated": false,
diff --git a/api_docs/presentation_panel.mdx b/api_docs/presentation_panel.mdx
index e10391498aed..994ba26aee1e 100644
--- a/api_docs/presentation_panel.mdx
+++ b/api_docs/presentation_panel.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/presentationPanel
title: "presentationPanel"
image: https://source.unsplash.com/400x175/?github
description: API docs for the presentationPanel plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'presentationPanel']
---
import presentationPanelObj from './presentation_panel.devdocs.json';
diff --git a/api_docs/presentation_util.mdx b/api_docs/presentation_util.mdx
index 879f85a1debf..d1a1121ed511 100644
--- a/api_docs/presentation_util.mdx
+++ b/api_docs/presentation_util.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/presentationUtil
title: "presentationUtil"
image: https://source.unsplash.com/400x175/?github
description: API docs for the presentationUtil plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'presentationUtil']
---
import presentationUtilObj from './presentation_util.devdocs.json';
diff --git a/api_docs/profiling.mdx b/api_docs/profiling.mdx
index 10fe2007dd25..8b011921881e 100644
--- a/api_docs/profiling.mdx
+++ b/api_docs/profiling.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/profiling
title: "profiling"
image: https://source.unsplash.com/400x175/?github
description: API docs for the profiling plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'profiling']
---
import profilingObj from './profiling.devdocs.json';
diff --git a/api_docs/profiling_data_access.devdocs.json b/api_docs/profiling_data_access.devdocs.json
index 23726acc3081..e674938901dd 100644
--- a/api_docs/profiling_data_access.devdocs.json
+++ b/api_docs/profiling_data_access.devdocs.json
@@ -55,7 +55,7 @@
"CloudSetupStateType",
" | ",
"SetupStateType",
- ">; fetchFunction: ({ core, esClient, startIndex, endIndex, indices, stacktraceIdsField, query, totalSeconds, }: ",
+ ">; fetchFunctions: ({ core, esClient, startIndex, endIndex, indices, stacktraceIdsField, query, totalSeconds, }: ",
"FetchFunctionsParams",
") => Promise<",
{
diff --git a/api_docs/profiling_data_access.mdx b/api_docs/profiling_data_access.mdx
index 3e9bf36aaae0..5fb3d261b024 100644
--- a/api_docs/profiling_data_access.mdx
+++ b/api_docs/profiling_data_access.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/profilingDataAccess
title: "profilingDataAccess"
image: https://source.unsplash.com/400x175/?github
description: API docs for the profilingDataAccess plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'profilingDataAccess']
---
import profilingDataAccessObj from './profiling_data_access.devdocs.json';
diff --git a/api_docs/remote_clusters.mdx b/api_docs/remote_clusters.mdx
index 7b4961213e89..0739092ad7a4 100644
--- a/api_docs/remote_clusters.mdx
+++ b/api_docs/remote_clusters.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/remoteClusters
title: "remoteClusters"
image: https://source.unsplash.com/400x175/?github
description: API docs for the remoteClusters plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'remoteClusters']
---
import remoteClustersObj from './remote_clusters.devdocs.json';
diff --git a/api_docs/reporting.mdx b/api_docs/reporting.mdx
index a010c4b0c52a..065fa5a7dedf 100644
--- a/api_docs/reporting.mdx
+++ b/api_docs/reporting.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/reporting
title: "reporting"
image: https://source.unsplash.com/400x175/?github
description: API docs for the reporting plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'reporting']
---
import reportingObj from './reporting.devdocs.json';
diff --git a/api_docs/rollup.mdx b/api_docs/rollup.mdx
index c0f8910924eb..c62b419d0847 100644
--- a/api_docs/rollup.mdx
+++ b/api_docs/rollup.mdx
@@ -8,7 +8,7 @@ slug: /kibana-dev-docs/api/rollup
title: "rollup"
image: https://source.unsplash.com/400x175/?github
description: API docs for the rollup plugin
-date: 2024-03-11
+date: 2024-03-13
tags: ['contributor', 'dev', 'apidocs', 'kibana', 'rollup']
---
import rollupObj from './rollup.devdocs.json';
diff --git a/api_docs/rule_registry.devdocs.json b/api_docs/rule_registry.devdocs.json
index 6af7f820a554..d8581b4e2ec5 100644
--- a/api_docs/rule_registry.devdocs.json
+++ b/api_docs/rule_registry.devdocs.json
@@ -107,7 +107,7 @@
"label": "get",
"description": [],
"signature": [
- "({ id, index }: GetAlertParams) => Promise Promise Promise<",
"SearchResponse",
- " Promise Promise OutputOf OutputOf
+
+```
+
+## Main Interface
+
+### LensConfigBuilder
+
+The `LensConfigBuilder` class is the central interface of the API, facilitating the creation of various Lens chart types through a unified and simplified process. It leverages predefined chart configurations and integrates seamlessly with essential Kibana services, such as formula calculations and data view management, to produce either Lens attributes or embeddable inputs based on the developer's requirements.
+
+#### Constructor
+
+The constructor requires two parameters:
+
+- `formulaAPI`: An instance of `FormulaPublicApi`, allowing the builder to perform formula calculations necessary for certain visualizations.
+- `dataViewsAPI`: An instance of `DataViewsPublicPluginStart`, enabling the builder to access and manage data views within Kibana.
+
+#### build Method
+
+The `build` method is the primary method used to generate a Lens configuration. It accepts a `LensConfig` object, detailing the type of chart and its options, and an optional `LensConfigOptions` object for additional configuration options like filters, queries, and time ranges.
+
+**Parameters:**
+
+- `config`: A `LensConfig` object specifying the chart type and its configuration.
+- `options` (optional): A `LensConfigOptions` object providing additional settings such as embeddable options, time range overrides, filters, and queries.
+
+**Returns:** A Promise resolving to either `LensAttributes` or `LensEmbeddableInput`, depending on the options provided. This allows the generated configuration to be directly used within Kibana Lens visualizations.
+
+Here's a detailed breakdown of each property within the `LensConfigOptions`:
+
+### embeddable
+
+- **Type:** `boolean`
+- **Optional**
+- **Description:** Determines the format of the output generated by the `LensConfigBuilder`. When set to `true`, the output will be in the form of `LensEmbeddableInput`, suitable for embedding directly into a Kibana dashboard as an embeddable object. If `false` or not set, the output will be `LensAttributes`, representing the configuration attributes for Lens visualizations without the embedding specifics.
+
+### timeRange
+
+- **Type:** `TimeRange`
+- **Optional**
+- **Description:** Allows for an optional override of the time range for the visualization. The `TimeRange` object includes `from` and `to` properties to specify the start and end times, and a `type` property indicating whether the range is `relative` or `absolute`. This is particularly useful for tailoring the visualization to specific time frames of interest, independent of the global time filters applied in Kibana.
+
+### filters
+
+- **Type:** `Filter[]`
+- **Optional**
+- **Description:** Provides an array of `Filter` objects that will be applied to the visualization, enabling developers to pre-define and apply specific filters to the data being visualized. This allows for the creation of more focused and relevant visualizations by pre-filtering the data based on specific criteria.
+
+### query
+
+- **Type:** `Query`
+- **Optional**
+- **Description:** Allows specifying a query to further refine the data displayed in the visualization. The `Query` object includes a `language` property (e.g., `kuery` or `lucene`) and a `query` string, which represents the actual query to be executed. This is useful for dynamically adjusting the data set based on user input or application context, providing a flexible way to interact with the data.
diff --git a/dev_docs/lens/dataset.mdx b/dev_docs/lens/dataset.mdx
new file mode 100644
index 000000000000..848b08eae9af
--- /dev/null
+++ b/dev_docs/lens/dataset.mdx
@@ -0,0 +1,20 @@
+### `dataset`
+
+The `dataset` configuration within the Lens Config Builder API defines the source of data for a visualization.
+
+#### Types of Dataset Configurations
+
+1. **LensESQLDataset (`LensESQLDataset`):**
+- Utilizes the Elasticsearch Query Language (ES|QL) for retrieving data.
+- Attributes include:
+- `esql`: A string containing the ES|QL query. ES|QL is a powerful query language that allows for complex search and aggregation operations, making this dataset type particularly flexible and powerful for advanced data retrieval scenarios.
+
+2. **LensDatatableDataset (`LensDatatableDataset`):**
+- Represents data in a tabular format, suitable for direct visualization or further processing.
+- This dataset type is typically used when data is already aggregated or processed and just needs to be displayed.
+
+3. **LensDataviewDataset (`LensDataviewDataset`):**
+- Targets data within a specific Elasticsearch index or data view.
+- Attributes include:
+- `index`: The ID of the data view or the name of the Elasticsearch index pattern.
+- `timeFieldName` (optional): The name of the field used for time-based operations, providing context for time range queries and aggregations.
diff --git a/dev_docs/lens/examples.mdx b/dev_docs/lens/examples.mdx
new file mode 100644
index 000000000000..781d2af0d79e
--- /dev/null
+++ b/dev_docs/lens/examples.mdx
@@ -0,0 +1,118 @@
+---
+id: kibDevLensConfigAPIExamples
+slug: /kibana-dev-docs/lens/config-builder/examples
+title: Lens Config Builder API Examples
+description: Lens Config Builder API Examples
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'examples']
+---
+
+Here are a few simple configurations for different types of visualizations using the Lens Config Builder API.
+These examples demonstrate how to set up basic charts, including Metric, Pie, and XY (line chart) visualizations.
+Each configuration showcases the flexibility and ease of defining visual attributes, queries, and other options
+to tailor the visualization to specific requirements.
+
+### Metric Chart Configuration
+
+```javascript
+const metricConfig = {
+ chartType: 'metric',
+ title: 'Total Sales',
+ dataset: {
+ esql: 'from myindex | stats totalSales = sum(sales_field)',
+ },
+ value: 'totalSales',
+ label: 'Total Sales Value',
+};
+```
+
+**Explanation:**
+
+- `chartType`: Specifies the type of chart, in this case, a metric chart.
+- `title`: The title of the visualization, displayed as "Total Sales."
+- `dataset`: Defines the data source, in this case using ES|QL to select data.
+- `value`: Field name in the result to use for value.
+- `label`: The label for the metric, providing context to the value displayed.
+
+### Pie Chart Configuration
+
+```javascript
+const pieConfig = {
+ chartType: 'pie',
+ title: 'Sales by Category',
+ dataset: {
+ esql: 'from myindex | stats totalSales = sum(sales_field) by category_field | limit 10',
+ },
+ breakdown: ['category_field'],
+ value: 'totalSales',
+ legend: {
+ show: true,
+ position: 'right',
+ },
+};
+```
+
+**Explanation:**
+
+- `chartType`: Indicates that this configuration is for a pie chart.
+- `title`: Sets the visualization title to "Sales by Category."
+- `dataset`: Selects the data with ES|QL
+- `value`: specifies which field to use for value
+- `breakdown`: Specifies which field to use for breakdown
+- `legend`: Configures the legend to be shown on the right side of the chart, aiding in category identification.
+
+### XY Chart Configuration (Line Chart)
+
+```javascript
+const xyConfig = {
+ chartType: 'xy',
+ title: 'Monthly Sales Trend',
+ dataset: {
+ esql: 'FROM sales_data | EVAL timestamp=DATE_TRUNC(3 hour, @timestamp) | stats sales = SUM(sales_field) by timestamp',
+ },
+ layers: [
+ {
+ type: 'series',
+ seriesType: 'line',
+ xAxis: 'timestamp',
+ yAxis: [
+ {
+ value: 'sales',
+ label: 'Total Sales',
+ }
+ ],
+ },
+ ],
+ axisTitleVisibility: {
+ showXAxisTitle: true,
+ showYAxisTitle: true,
+ },
+};
+```
+
+**Explanation:**
+
+- `chartType`: Specifies an XY chart, which can represent various types of line, area, and bar charts.
+- `title`: The title for the visualization, "Monthly Sales Trend."
+- `dataset`: Uses ES|QL to select the data.
+- `layers`: Defines a single layer for the chart, in this case, a line chart representing sales over time.
+- `type`: Indicates the layer is a series.
+- `seriesType`: Specifies the chart as a line chart.
+- `xAxis`: Defines the field to use for x axis.
+- `yAxis`: Defines the field to use for y axis and the label
+- `axisTitleVisibility`: Ensures both X and Y axis titles are displayed for clarity.
+
+These configurations illustrate the API's capability to define various visualization types with a straightforward and comprehensible structure, enabling developers to quickly integrate rich data visualizations into their applications.
+
+
+### Converting to actual lens configuration
+
+Any of the above LensConfigs can be converted to actual lens configuration which can be passed to lens embeddable like this:
+
+```
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder(config, {
+ timeRange: { from: 'now-30d', to: 'now', type: 'relative' },
+ embeddable: true,
+}
+```
\ No newline at end of file
diff --git a/dev_docs/lens/gauge.mdx b/dev_docs/lens/gauge.mdx
new file mode 100644
index 000000000000..536ac90e1889
--- /dev/null
+++ b/dev_docs/lens/gauge.mdx
@@ -0,0 +1,84 @@
+---
+id: kibDevLensConfigAPIGauge
+slug: /kibana-dev-docs/lens/config-builder/gauge
+title: Lens Config Builder API - Gauge
+description: Lens Config Builder API - Gauge
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'gauge']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensGaugeConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'gauge'`
+- **Description:** Sets the chart type to gauge.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `value`
+
+- **Type:** `LensLayerQuery`
+- **Description:** Specifies the field or formula used to determine the main value displayed by the gauge. This is critical for representing the core metric around which the gauge visualization is centered.
+
+## Optional Properties
+
+### `label`
+
+- **Type:** `string`
+- **Description:** Offers a descriptive label for the gauge's main value, providing additional context and helping to clarify what the gauge measures.
+
+### `queryMinValue`
+
+- **Type:** `LensLayerQuery`
+- **Description:** Defines a query for calculating the minimum value of the gauge's scale. This is particularly useful for gauges that measure a metric's performance against predefined ranges.
+
+### `queryMaxValue`
+
+- **Type:** `LensLayerQuery`
+- **Description:** Determines a query for establishing the maximum value of the gauge's scale, setting the upper boundary for what the gauge can display.
+
+### `queryGoalValue`
+
+- **Type:** `LensLayerQuery`
+- **Description:** Allows specifying a goal or target value for the gauge, enabling users to visually assess how the current value compares to a set objective.
+
+### `shape`
+
+- **Type:** `'arc' | 'circle' | 'horizontalBullet' | 'verticalBullet'`
+- **Description:** Controls the appearance of the gauge by defining its shape. Each shape can convey the data differently, offering various stylistic and functional approaches to data presentation.
+
+
+
+## Example
+
+```
+const gaugeConfig: LensConfig = {
+ chartType: 'gauge',
+ title: 'CPU Utilization',
+ dataset: {
+ esql: 'from myindex | stats avgCpuUtilization = avg(cpu_utilization) | eval max=100 ',
+ },
+ value: 'avgCpuUtilization',
+ label: 'Average CPU Utilization',
+ queryMaxValue: 'max',
+ shape: 'arc',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(gaugeConfig, {
+ timeRange: { from: 'now-1h', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
+This example demonstrates how to create a gauge visualization using the `LensGaugeConfig`. It sets up a gauge to display the average CPU utilization.
\ No newline at end of file
diff --git a/dev_docs/lens/heatmap.mdx b/dev_docs/lens/heatmap.mdx
new file mode 100644
index 000000000000..8d5bd90f3459
--- /dev/null
+++ b/dev_docs/lens/heatmap.mdx
@@ -0,0 +1,73 @@
+---
+id: kibDevLensConfigAPIHeatmap
+slug: /kibana-dev-docs/lens/config-builder/heatmap
+title: Lens Config Builder API - Heatmap
+description: Lens Config Builder API - Heatmap
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'heatmap']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensHeatmapConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'heatmap'`
+- **Description:** Sets the chart type to heatmap.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `breakdown`
+
+- **Type:** `LensBreakdownConfig`
+- **Description:** Configures the data segmentation for Y-axis. Check breakdown configuration details below.
+
+### `xAxis`
+
+- **Type:** `LensBreakdownConfig`
+- **Description:** Defines the breakdown configuration for the X-axis in the heatmap. Check breakdown configuration details below.
+
+## Optional Properties
+
+### `legend`
+
+- **Type:** `Identity`
+- **Description:** Configures the legend for the heatmap. The legend settings include options to show or hide the legend and to specify its position ('top', 'left', 'bottom', 'right'). This is crucial for interpreting the colors and gradients used in the heatmap, as it provides a reference scale for the data values represented.
+
+
+
+
+## Example
+
+```
+const heatmapConfig: LensConfig = {
+ chartType: 'heatmap',
+ title: 'Heatmap Chart',
+ dataset: {
+ esql: 'from kibana_sample_data_logs | stats bytes=sum(bytes) by geo.dest, geo.src',
+ },
+ breakdown: 'geo.dest',
+ xAxis: 'geo.src',
+ value: 'bytes',
+ legend: {
+ show: true,
+ position: 'right',
+ },
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(heatmapConfig, {
+ timeRange: { from: 'now-1M', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
+This example outlines how to create a heatmap visualization displaying website traffic, segmented by days of the week (`weekday`) and hours of the day (`hour`). The `breakdown` and `xAxis` configurations segment the data into a grid where each cell represents the number of sessions during a specific hour on a given day. The use of an ESQL query in the `dataset` configuration allows for direct aggregation of traffic data, facilitating efficient and dynamic heatmap generation. The legend is configured to be visible on the right, providing a guide for interpreting the color intensities of the heatmap.
\ No newline at end of file
diff --git a/dev_docs/lens/index.mdx b/dev_docs/lens/index.mdx
new file mode 100644
index 000000000000..a962895309db
--- /dev/null
+++ b/dev_docs/lens/index.mdx
@@ -0,0 +1,13 @@
+---
+id: kibDevLensOverview
+slug: /kibana-dev-docs/lens
+title: Lens Documentation
+description: Lens Documentation for Developers
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'landing']
+---
+
+
diff --git a/dev_docs/lens/metric.mdx b/dev_docs/lens/metric.mdx
new file mode 100644
index 000000000000..3ea283088e4b
--- /dev/null
+++ b/dev_docs/lens/metric.mdx
@@ -0,0 +1,82 @@
+---
+id: kibDevLensConfigAPIMetric
+slug: /kibana-dev-docs/lens/config-builder/metric
+title: Lens Config Builder API - Metric
+description: Lens Config Builder API - Metric
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'metric']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+
+Understanding `LensMetricConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'metric'`
+- **Description:** Sets the chart type to metric.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `value`
+
+- **Type:** `LensLayerQuery`
+- **Description:** A field to use for the value if the dataset is ESQL or Datatable or LensFormula is dataset is an index pattern.
+
+## Optional Properties
+
+### `label`
+
+- **Type:** `string`
+- **Description:** Provides a descriptive label for the displayed metric, enhancing the chart's interpretability by offering additional details about the metric.
+
+### `querySecondaryMetric`
+
+- **Type:** `LensLayerQuery`
+- **Description:** Allows specifying a secondary metric, same as value it should be the name of field or lens formula.
+
+### `queryMaxValue`
+
+- **Type:** `LensLayerQuery`
+- **Description:** Used to define a query for calculating a maximum value, same as value it should be the name of field or lens formula.
+
+
+
+### `trendLine`
+
+- **Type:** `boolean`
+- **Description:** When set to true, indicates that a trend line should be displayed, providing a visual indication of how the metric has changed over time.
+
+### `subtitle`
+
+- **Type:** `string`
+- **Description:** An optional subtitle for the chart, which can be used to provide additional context, explanatory notes, or any supplementary information that aids in understanding the metric.
+
+
+## Example
+
+```
+const config: LensConfig = {
+ chartType: 'metric',
+ title: 'Total Sales',
+ dataset: {
+ esql: 'from myindex | stats totalSales = sum(sales_field)',
+ },
+ value: 'totalSales',
+ label: 'Total Sales Value',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder(config, {
+ timeRange: { from: 'now-30d', to: 'now', type: 'relative' },
+ embeddable: true,
+}
+```
\ No newline at end of file
diff --git a/dev_docs/lens/mosaic.mdx b/dev_docs/lens/mosaic.mdx
new file mode 100644
index 000000000000..7fcc41f41cc4
--- /dev/null
+++ b/dev_docs/lens/mosaic.mdx
@@ -0,0 +1,62 @@
+---
+id: kibDevLensConfigAPIMosaic
+slug: /kibana-dev-docs/lens/config-builder/mosaic
+title: Lens Config Builder API - Mosaic
+description: Lens Config Builder API - Mosaic
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'mosaic']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensMosaicConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'mosaic'`
+- **Description:** Sets the chart type to mosaic, a variation of a stacked bar chart that displays the distribution of data across two categories.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `breakdown`
+
+- **Type:** `LensBreakdownConfig`
+- **Description:** Configures the primary categorization of data for the mosaic chart. This breakdown specifies the main grouping of data, typically represented along one of the chart's axes. Check breakdown configuration details below.
+
+### `xAxis`
+
+- **Type:** `LensBreakdownConfig`
+- **Description:** Defines the configuration for the X-axis categorization in the mosaic chart. It determines how data points are grouped along the horizontal axis, influencing the chart's layout and the distribution of stacked segments. Check breakdown configuration details below.
+
+## Optional Properties
+
+
+
+## Example
+
+```
+const mosaicConfig: LensConfig = {
+ chartType: 'mosaic',
+ title: 'Mosaic Chart',
+ dataset: {
+ esql: 'from kibana_sample_data_logs | stats bytes = sum(bytes) by geo.src, geo.dest',
+ },
+ breakdown: 'geo.src',
+ xAxis: 'geo.dest',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(mosaicConfig, {
+ timeRange: { from: 'now-1y', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
+This example demonstrates configuring a mosaic chart to visualize the distribution of product sales across different regions and categories. The `breakdown` is set to segment data by the top 5 regions, while the `xAxis` config segments further by the top 10 product categories. An ESQL query aggregates sales within the specified groupings, enabling the mosaic chart to display the proportional distribution of sales across these dimensions. This type of visualization is particularly useful for identifying patterns or disparities in sales performance across different market segments.
\ No newline at end of file
diff --git a/dev_docs/lens/pie.mdx b/dev_docs/lens/pie.mdx
new file mode 100644
index 000000000000..f511a431f84f
--- /dev/null
+++ b/dev_docs/lens/pie.mdx
@@ -0,0 +1,67 @@
+---
+id: kibDevLensConfigAPIPie
+slug: /kibana-dev-docs/lens/config-builder/pie
+title: Lens Config Builder API - Pie
+description: Lens Config Builder API - Pie
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'pie']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensPieConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed values `'pie' | 'donut'`
+- **Description:** Sets the chart type to either pie or donut.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `breakdown`
+
+- **Type:** `LensBreakdownConfig[]`
+- **Description:** An array of breakdown configurations to segment the data into slices. Each breakdown configures how data should be grouped and displayed in the pie or donut chart, enabling detailed and meaningful data representations. Check breakdown configuration details below.
+
+## Optional Properties
+
+### `legend`
+
+- **Type:** `Identity`
+- **Description:** Configures the chart's legend. It includes properties to show or hide the legend and to position it relative to the chart ('top', 'left', 'bottom', 'right'). This helps in identifying what each slice of the pie or donut chart represents.
+
+
+
+
+## Example
+
+```
+const pieConfig: LensConfig = {
+ chartType: 'pie',
+ title: 'Bytes by Region',
+ dataset: {
+ esql: 'from sales_data | stats avgBytes = avg(bytes) by geo.src',
+ },
+ breakdown: [
+ 'geo.src'
+ ],
+ legend: {
+ show: true,
+ position: 'right',
+ },
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(pieConfig, {
+ timeRange: { from: 'now-1y', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
diff --git a/dev_docs/lens/regionmap.mdx b/dev_docs/lens/regionmap.mdx
new file mode 100644
index 000000000000..2eee2c8f9dce
--- /dev/null
+++ b/dev_docs/lens/regionmap.mdx
@@ -0,0 +1,53 @@
+---
+id: kibDevLensConfigAPIRegionMap
+slug: /kibana-dev-docs/lens/config-builder/regionmap
+title: Lens Config Builder API - Region Map
+description: Lens Config Builder API - Region Map
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'regionmap']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensRegionMapConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'regionmap'`
+- **Description:** Sets the chart type to region map, which is used for displaying geographical data across different regions on a map. This visualization type is excellent for spatial analysis, showing how metrics vary across geographic locations.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+
+
+## Optional Properties
+
+
+
+## Example
+
+```
+const regionMapConfig: LensConfig = {
+ chartType: 'regionmap',
+ title: 'Sales by Country',
+ dataset: {
+ esql: 'from kibana_sample_data_logs | stats bytes=sum(bytes) by geo.dest',
+ },
+ breakdown: 'geo.dest',
+ value: 'bytes',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(regionMapConfig, {
+ timeRange: { from: 'now-1y', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
diff --git a/dev_docs/lens/table.mdx b/dev_docs/lens/table.mdx
new file mode 100644
index 000000000000..1a0e4786aca3
--- /dev/null
+++ b/dev_docs/lens/table.mdx
@@ -0,0 +1,68 @@
+---
+id: kibDevLensConfigAPITable
+slug: /kibana-dev-docs/lens/config-builder/table
+title: Lens Config Builder API - Table
+description: Lens Config Builder API - Table
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'table']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensTableConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'table'`
+- **Description:** Sets the chart type to table, allowing for the display of data in a tabular format. Tables are versatile for detailed data analysis, enabling the display of multiple dimensions and metrics side by side.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+## Optional Properties
+
+### `splitBy`
+
+- **Type:** `LensBreakdownConfig[]`
+- **Optional**
+- **Description:** An array of breakdown configurations to segment the data into different sections within the table. Each breakdown can create a new column or row based on the field specified, allowing for complex data organization and grouping. Check breakdown configuration details below.
+
+### `breakdown`
+
+- **Type:** `LensBreakdownConfig[]`
+- **Optional**
+- **Description:** Similar to `splitBy`, but specifically used for creating additional columns based on the breakdown of a particular field. It's useful for comparing metrics across different categories directly within the table. Check breakdown configuration details below.
+
+
+
+
+## Example
+
+```
+const tableConfig: LensConfig = {
+ chartType: 'table',
+ title: 'Table chart',
+ dataset: {
+ esql: 'from kibana_sample_data_logs | stats bytes=sum(bytes) by geo.dest, geo.src',
+ },
+ splitBy: [
+ 'geo.src'
+ ],
+ breakdown: [
+ 'geo.dest'
+ ],
+ value: 'bytes',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(tableConfig, {
+ timeRange: { from: 'now-1y', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
\ No newline at end of file
diff --git a/dev_docs/lens/tagcloud.mdx b/dev_docs/lens/tagcloud.mdx
new file mode 100644
index 000000000000..734aa9cd23ec
--- /dev/null
+++ b/dev_docs/lens/tagcloud.mdx
@@ -0,0 +1,50 @@
+---
+id: kibDevLensConfigAPITagCloud
+slug: /kibana-dev-docs/lens/config-builder/tagcloud
+title: Lens Config Builder API - Tag Cloud
+description: Lens Config Builder API - Tag Cloud
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'tagcloud']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensTagCloudConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'tagcloud'`
+- **Description:** Sets the chart type to tag cloud. Tag clouds are visual representations where tags are depicted in varying sizes, indicating the frequency or importance of each tag. This visualization type is beneficial for quickly identifying the most prominent or common terms in a dataset.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+
+
+## Optional Properties
+
+## Example
+
+```
+const tagCloudConfig: LensConfig = {
+ chartType: 'tagcloud',
+ title: 'TagCloud chart',
+ dataset: {
+ esql: 'from kibana_sample_data_logs | stats bytes=sum(bytes) by geo.dest',
+ },
+ breakdown: 'geo.dest',
+ value: 'bytes',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(tagCloudConfig, {
+ timeRange: { from: 'now-1M', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
\ No newline at end of file
diff --git a/dev_docs/lens/treemap.mdx b/dev_docs/lens/treemap.mdx
new file mode 100644
index 000000000000..88ee81640fe9
--- /dev/null
+++ b/dev_docs/lens/treemap.mdx
@@ -0,0 +1,59 @@
+---
+id: kibDevLensConfigAPITreeMap
+slug: /kibana-dev-docs/lens/config-builder/treemap
+title: Lens Config Builder API - TreeMap
+description: Lens Config Builder API - TreeMap
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'treemap']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensTreeMapConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'treemap'`
+- **Description:** Sets the chart type to treemap. Treemaps are used to visualize hierarchical data using nested rectangles. Each branch of the tree is given a rectangle, which is then tiled with smaller rectangles representing sub-branches. A leaf node's size and color can vary to show statistical information about the node and its relationship to the rest of the tree.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `breakdown`
+
+- **Type:** `LensBreakdownConfig[]`
+- **Description:** An array of breakdown configurations to hierarchically segment the data into nested rectangles. The breakdowns determine how the data is grouped and subdivided, with each level of the hierarchy represented by a deeper level of nesting in the treemap. Check breakdown configuration details below.
+
+
+
+## Optional Properties
+
+## Example
+
+```
+const treemapConfig: LensConfig = {
+ chartType: 'treemap',
+ title: 'Treemap chart',
+ dataset: {
+ esql: 'from kibana_sample_data_logs | stats bytes = sum(bytes) by geo.src, geo.dest',
+ },
+ breakdown: [
+ 'geo.src',
+ 'geo.dest',
+ ],
+ value: 'bytes',
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(treemapConfig, {
+ timeRange: { from: 'now-1y', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
diff --git a/dev_docs/lens/xy.mdx b/dev_docs/lens/xy.mdx
new file mode 100644
index 000000000000..5f0e3af272b8
--- /dev/null
+++ b/dev_docs/lens/xy.mdx
@@ -0,0 +1,175 @@
+---
+id: kibDevLensConfigAPIXY
+slug: /kibana-dev-docs/lens/config-builder/xy
+title: Lens Config Builder API - XY Chart
+description: Lens Config Builder API - XY Chart
+date: 2024-03-04
+tags: ['kibana', 'dev', 'lens', 'xy']
+---
+
+import Dataset from './dataset.mdx';
+import Breakdown from './breakdown.mdx';
+
+Understanding `LensXYConfig` in detail
+
+## Required Properties
+
+### `chartType`
+
+- **Type:** Fixed value `'xy'`
+- **Description:** Sets the chart type to XY, which is used for creating scatter plots, line charts, bar charts, and area charts. This versatile visualization type is ideal for comparing data across two axes, revealing trends, distributions, and relationships between variables.
+
+### `title`
+
+- **Type:** `string`
+- **Description:** The title of the visualization.
+
+
+
+### `layers`
+
+- **Type:** `Array`
+- **Description:** An array of layer configurations that define the data series, annotations, or reference lines to be displayed on the chart. Each layer type brings a different aspect of data visualization to the XY chart, allowing for a rich, multi-dimensional analysis.
+
+## Optional Properties
+
+### `legend`
+
+- **Type:** `Identity`
+- **Description:** Configures the chart's legend, including options to show or hide the legend and to specify its position ('top', 'left', 'bottom', 'right'). The legend is essential for identifying different data series within the chart.
+
+### `axisTitleVisibility`
+
+- **Type:** `Identity`
+- **Description:** Controls the visibility of axis titles, allowing for a clearer understanding of what each axis represents.
+
+### `emphasizeFitting`
+
+- **Type:** `boolean`
+- **Description:** When set to true, emphasizes the fitting of lines to the data points in line charts, making trends and patterns more apparent.
+
+### `fittingFunction`
+
+- **Type:** `'None' | 'Zero' | 'Linear' | 'Carry' | 'Lookahead' | 'Average' | 'Nearest'`
+- **Description:** Defines the method used to fit lines through the data points in line charts, affecting how trends are interpreted.
+
+### `yBounds`
+
+- **Type:** `LensYBoundsConfig`
+- **Description:** Specifies custom or automatic bounds for the Y-axis, enabling more control over how data ranges are displayed.
+
+
+For the XY chart within the Lens Config Builder API, there are three distinct types of series layers that can be added: `Annotation`, `Series`, and `ReferenceLine`. Each layer type serves a unique purpose in enhancing the chart with additional context, data representation, or benchmarks. Here's a detailed explanation of each series type:
+
+### Annotation Layer (`LensAnnotationLayer`)
+
+#### Purpose
+The Annotation Layer is used to add textual notes or icons at specific points on the chart, providing extra context or highlighting significant events or values. Annotations can help explain anomalies, mark milestones, or simply draw attention to certain aspects of the data.
+
+#### Key Properties
+- **`events`**: An array of objects specifying the annotation details. Each event can be tied to a specific point in time (`datetime`) or be based on a condition that matches data points (`field` and `filter`).
+- **`color`**: Specifies the color of the annotation marker or text, enhancing visual distinction.
+- **`icon`**: (Optional) Allows specifying an icon to be displayed as part of the annotation.
+
+### Series Layer (`LensSeriesLayer`)
+
+#### Purpose
+The Series Layer is the primary means of displaying data on an XY chart. It can represent data in various forms, including lines, bars, and areas, to depict trends, distributions, and comparisons across two axes.
+
+#### Key Properties
+- **`seriesType`**: Determines the visual representation of the series (e.g., `'line'`, `'bar'`, `'area'`), each offering a different way to interpret the underlying data.
+- **`xAxis`** Define the field to use on x-axis or lens formula when using index dataset.
+- **`breakdown`**: Field to breakdown or detailed breakdown configuration when using index dataset.
+- **`yaxis`**:
+ - **Type:** `Array`
+ - **Description:** Defines one or more metrics to be plotted on the Y-axis of the chart. Each item in the array represents a different metric or aspect of the data that will be visualized, allowing for a comprehensive and multi-dimensional analysis within a single chart.
+
+#### Sub-properties of `LensBaseLayer` within `yAxis`:
+
+- **`label`** (Optional)
+- **Type:** `string`
+- **Description:** Provides a descriptive label for the metric, which can be used for legend text or tooltips, enhancing the interpretability of the chart by offering additional details about what the metric represents.
+
+- **`filter`** (Optional)
+- **Type:** `string`
+- **Description:** Allows specifying a Kibana filter string to refine the data points included in the metric calculation, enabling the isolation of specific segments or conditions within the data.
+
+- **`format`** (Optional)
+- **Type:** `'bits' | 'bytes' | 'currency' | 'duration' | 'number' | 'percent' | 'string'`
+- **Description:** Defines the format in which the metric values should be displayed, facilitating the appropriate presentation of different types of data, such as financial figures, percentages, or raw numbers.
+
+- **`decimals`** (Optional)
+- **Type:** `number`
+- **Description:** Specifies the number of decimal places to include in the metric's displayed values, allowing for precision control in the presentation of data.
+
+- **`normalizeByUnit`** (Optional)
+- **Type:** `'s' | 'm' | 'h' | 'd'`
+- **Description:** Applies normalization of time-based metrics to a specified unit (seconds, minutes, hours, days), useful for standardizing time-related metrics for easier comparison and analysis.
+
+- **`compactValues`** (Optional)
+- **Type:** `boolean`
+- **Description:** When set to true, large numbers will be displayed in a compact format, making the chart easier to read by reducing the space needed for numerical values.
+
+- **`randomSampling`** (Optional)
+- **Type:** `number`
+- **Description:** Specifies a percentage (0-100) for random sampling of the data points, which can be useful for large datasets to improve chart rendering performance while still providing a representative view of the data trends.
+
+- **`useGlobalFilter`** (Optional)
+- **Type:** `boolean`
+- **Description:** Determines whether the chart should apply global filters defined in the dashboard or visualization context, allowing the metric to reflect broader data filtering criteria.
+
+- **`seriesColor`** (Optional)
+- **Type:** `string`
+- **Description:** Sets a specific color for the data series, enhancing the visual distinction between multiple metrics or series on the chart.
+
+- **`value`**
+- **Type:** `LensLayerQuery`
+- **Description:** The primary property that specifies the field or lens formula used to calculate the metric displayed on the Y-axis.
+
+### Reference Line Layer (`LensReferenceLineLayer`)
+
+#### Purpose
+The Reference Line Layer is used to add horizontal lines to the chart, serving as benchmarks or targets. These lines can represent goals, thresholds, averages, or any other fixed value that provides context to the data displayed.
+
+#### Key Properties
+- **`value`**: The fixed value where the reference line should be drawn. It can represent a numeric threshold, average, or any specific value relevant to the data or business logic.
+- **`lineThickness`**, **`color`**, and **`fill`**: Customize the appearance of the reference line, including its thickness, color, and whether the area above or below the line should be shaded to indicate a region of interest.
+
+## Example
+
+```
+const xyConfig: LensConfig = {
+ chartType: 'xy',
+ title: 'XY Chart',
+ dataset: {
+ esql: 'FROM sales_data | EVAL timestamp=DATE_TRUNC(3 hour, @timestamp) | stats sales = SUM(sales_field) by timestamp',
+ },
+ layers: [
+ {
+ type: 'series',
+ seriesType: 'line',
+ xAxis: 'timestamp',
+ yAxis: [
+ {
+ value: 'sales',
+ label: 'Total Sales',
+ },
+ ],
+ },
+ ],
+ legend: {
+ show: true,
+ position: 'bottom',
+ },
+ axisTitleVisibility: {
+ showXAxisTitle: true,
+ showYAxisTitle: true,
+ },
+};
+const configBuilder = new LensConfigBuilder(lensFormulaAPI, dataViewsAPI);
+const lensConfig = configBuilder.build(xyConfig, {
+ timeRange: { from: 'now-1y', to: 'now', type: 'relative' },
+ embeddable: true,
+});
+```
+
diff --git a/docs/developer/architecture/core/saved-objects-service-use-case-examples.asciidoc b/docs/developer/architecture/core/saved-objects-service-use-case-examples.asciidoc
index 2b2cbde0b3f1..cf6af235e88a 100644
--- a/docs/developer/architecture/core/saved-objects-service-use-case-examples.asciidoc
+++ b/docs/developer/architecture/core/saved-objects-service-use-case-examples.asciidoc
@@ -687,7 +687,7 @@ describe('myIntegrationTest', () => {
afterEach(async () => {
if(testkit) {
// delete the indices between each tests to perform a migration again
- await testkit.tearsDown();
+ await testkit.tearDown();
}
});
diff --git a/docs/developer/plugin-list.asciidoc b/docs/developer/plugin-list.asciidoc
index 81c659146853..f8c4e8644e5d 100644
--- a/docs/developer/plugin-list.asciidoc
+++ b/docs/developer/plugin-list.asciidoc
@@ -692,6 +692,10 @@ Elastic.
|This document gives an overview of the features of the Observability AI Assistant at the time of writing, and how to use them. At a high level, the Observability AI Assistant offers contextual insights, and a chat functionality that we enrich with function calling, allowing the LLM to hook into the user's data. We also allow the LLM to store things it considers new information as embeddings into Elasticsearch, and query this knowledge base when it decides it needs more information, using ELSER.
+|{kib-repo}blob/{branch}/x-pack/plugins/observability_solution/observability_ai_assistant_app/README.md[observabilityAIAssistantApp]
+|This app registers defaults functions. It exists as a separate plugin to avoid cyclical dependencies.
+
+
|{kib-repo}blob/{branch}/x-pack/plugins/observability_solution/observability_logs_explorer/README.md[observabilityLogsExplorer]
|This plugin provides an app based on the LogsExplorer component from the logs_explorer plugin, but adds observability-specific affordances.
diff --git a/docs/management/cases/images/cases-custom-fields-add.png b/docs/management/cases/images/cases-custom-fields-add.png
index 1938ab295005..6f4d452a9429 100644
Binary files a/docs/management/cases/images/cases-custom-fields-add.png and b/docs/management/cases/images/cases-custom-fields-add.png differ
diff --git a/docs/management/cases/manage-cases.asciidoc b/docs/management/cases/manage-cases.asciidoc
index 50c2bc0ff5ff..79b0f09642cc 100644
--- a/docs/management/cases/manage-cases.asciidoc
+++ b/docs/management/cases/manage-cases.asciidoc
@@ -67,6 +67,8 @@ image::images/cases-custom-fields-add.png[Add a custom field in case settings]
. If you want the text field to be mandatory in all cases, select *Make this field required*.
+. Optionally add a default value.
+
. Click *Save field*.
You can subsequently remove or edit custom fields on the *Settings* page.
diff --git a/docs/management/maintenance-windows/maintenance-windows.asciidoc b/docs/management/maintenance-windows/maintenance-windows.asciidoc
index a2ea825d5e4c..559151c060ed 100644
--- a/docs/management/maintenance-windows/maintenance-windows.asciidoc
+++ b/docs/management/maintenance-windows/maintenance-windows.asciidoc
@@ -54,11 +54,7 @@ If you turn on *Filter alerts*, you can use KQL to filter the alerts affected by
image::images/create-maintenance-window-filter.png[The Create Maintenance Window user interface in {kib} with alert filters turned on]
// NOTE: This is an autogenerated screenshot. Do not edit it directly.
-[NOTE]
-====
-* You can select only a single category when you turn on filters.
-* Some rules are not affected by maintenance window filters because their alerts do not contain requisite data. In particular, <>, <>, {ml-docs}/ml-configuring-alerts.html[{anomaly-jobs} health], and {ref}/transform-alerts.html[transform health] rules are not affected by the filters.
-====
+NOTE: You can select only a single category when you turn on filters.
A maintenance window can have any one of the following statuses:
diff --git a/docs/user/alerting/alerting-getting-started.asciidoc b/docs/user/alerting/alerting-getting-started.asciidoc
index 3e6787370ff2..545155e65689 100644
--- a/docs/user/alerting/alerting-getting-started.asciidoc
+++ b/docs/user/alerting/alerting-getting-started.asciidoc
@@ -75,7 +75,7 @@ When defining actions in a rule, you specify:
Rather than repeatedly entering connection information and credentials for each action, {kib} simplifies action setup using <>. For example if four rules send email notifications via the same SMTP service, they can all reference the same SMTP connector.
-The _action frequency_ defines when the action runs (for example, only when the alert status changes or at specific time intervals). Each rule type also has a set of the _action groups_ that affects when the action runs (for example, when the threshold is met or when the alert is recovered). If you want to reduce the number of notifications you receive without affecting their timeliness, some rule types support alert summaries. You can set the action frequency such that you receive notifications that summarize the new, ongoing, and recovered alerts at your preferred time intervals.
+The _action frequency_ defines when the action runs (for example, only when the alert status changes or at specific time intervals). Each rule type also has a set of the _action groups_ that affects when the action runs (for example, when the threshold is met or when the alert is recovered). If you want to reduce the number of notifications you receive without affecting their timeliness, set the action frequency to a summary of alerts. You will receive notifications that summarize the new, ongoing, and recovered alerts at your preferred time intervals.
Some types of rules enable you to further refine the conditions under which actions run.
For example, you can specify that actions run only when an alert occurs within a specific time frame or when it matches a KQL query.
diff --git a/docs/user/alerting/create-and-manage-rules.asciidoc b/docs/user/alerting/create-and-manage-rules.asciidoc
index 670e531350d5..b1a99f856546 100644
--- a/docs/user/alerting/create-and-manage-rules.asciidoc
+++ b/docs/user/alerting/create-and-manage-rules.asciidoc
@@ -55,7 +55,7 @@ Each rule type provides its own way of defining the conditions to detect, but an
For example, in an {es} query rule, you specify an index, a query, and a threshold, which uses a metric aggregation operation (`count`, `average`, `max`, `min`, or `sum`):
[role="screenshot"]
-image::images/es-query-rule-conditions.png[UI for defining rule conditions in an {es} query rule,500]
+image::images/rule-types-es-query-conditions.png[UI for defining rule conditions in an {es} query rule,500]
// NOTE: This is an autogenerated screenshot. Do not edit it directly.
All rules must have a check interval, which defines how often to evaluate the rule conditions. Checks are queued; they run as close to the defined value as capacity allows.
@@ -66,35 +66,32 @@ For details on what types of rules are available and how to configure them, refe
[[defining-rules-actions-details]]
==== Actions
-You can add one or more actions to your rule to generate notifications when its
-conditions are met and when they are no longer met.
+You can add one or more actions to your rule to generate notifications when its conditions are met and when they are no longer met.
-Each action uses a connector, which provides connection information for a {kib} service or third party integration, depending on where you want to send the notifications. If no connectors exist, click **Add connector** to create one.
+Each action uses a connector, which provides connection information for a {kib} service or third party integration, depending on where you want to send the notifications.
+If no connectors exist, click **Add connector** to create one.
+
+After you select a connector, set the action frequency.
+You can choose to create a summary of alerts on each check interval or on a custom interval.
+Alternatively, you an choose to run actions for each alert (at each check interval, only when the alert status changes, or at a custom interval).
+
+NOTE: If you choose a custom action interval, it cannot be shorter than the rule's check interval.
-After you select a connector, set the action frequency. If the rule type supports alert summaries, you can choose to create a summary of alerts on each check interval or on a custom interval.
For example, if you create an {es} query rule, you can send notifications that summarize the new, ongoing, and recovered alerts on a custom interval:
[role="screenshot"]
image::images/es-query-rule-action-summary.png[UI for defining alert summary action in an {es} query rule,500]
// NOTE: This is an autogenerated screenshot. Do not edit it directly.
-[NOTE]
-====
-* Some rules that support alert summaries, such as metric threshold rules, enable you to further refine when actions run by adding time frame and query filters.
-* If you choose a custom action interval, it cannot be shorter than the rule's check interval.
-====
-
-Alternatively, you can set the action frequency such that the action runs for each alert.
-If the rule type does not support alert summaries, this is your only available option.
-You must choose when the action runs (for example, at each check interval, only when the alert status changes, or at a custom action interval).
-You must also choose an action group, which affects whether the action runs. Each rule type has a specific set of valid action groups.
+When you choose to run actions for each alert, you must specify an action group.
+Each rule type has a set of valid action groups, which affect when an action runs.
For example, you can set *Run when* to `Query matched` or `Recovered` for the {es} query rule:
[role="screenshot"]
image::images/es-query-rule-recovery-action.png[UI for defining a recovery action,500]
// NOTE: This is an autogenerated screenshot. Do not edit it directly.
-Each connector supports a specific set of actions for each action group and enables different action properties.
+Connectors have unique behavior for each action group.
For example, you can have actions that create an {opsgenie} alert when rule conditions are met and recovery actions that close the {opsgenie} alert. For more information about connectors, refer to <>.
[[alerting-concepts-suppressing-duplicate-notifications]]
@@ -114,7 +111,7 @@ servers that continue to exceed the threshold:
* Minute 2: X123 and Y456 > 0.9. _One email_ will be sent for Y456.
* Minute 3: X123, Y456, Z789 > 0.9. _One email_ will be sent for Z789.
-To get notified only once when a server exceeds the threshold, you can set the action frequency to `On status changes`. Alternatively, if the rule type supports alert summaries, consider using them to reduce the volume of notifications.
+To get notified only once when a server exceeds the threshold, you can set the action frequency to `On status changes`. Alternatively, consider using alert summaries to reduce the volume of notifications.
==============================================
[float]
diff --git a/docs/user/alerting/images/alert-types-tracking-containment-conditions.png b/docs/user/alerting/images/alert-types-tracking-containment-conditions.png
index b328bb05dd0d..1ff0a03b8551 100644
Binary files a/docs/user/alerting/images/alert-types-tracking-containment-conditions.png and b/docs/user/alerting/images/alert-types-tracking-containment-conditions.png differ
diff --git a/docs/user/alerting/images/es-query-rule-conditions.png b/docs/user/alerting/images/es-query-rule-conditions.png
deleted file mode 100644
index b2a4aeba332d..000000000000
Binary files a/docs/user/alerting/images/es-query-rule-conditions.png and /dev/null differ
diff --git a/docs/user/alerting/images/rule-types-es-query-conditions.png b/docs/user/alerting/images/rule-types-es-query-conditions.png
index 786d17236886..e1bbccc1b83d 100644
Binary files a/docs/user/alerting/images/rule-types-es-query-conditions.png and b/docs/user/alerting/images/rule-types-es-query-conditions.png differ
diff --git a/docs/user/alerting/rule-types.asciidoc b/docs/user/alerting/rule-types.asciidoc
index bcab22f05ca0..c7bd85fa20ed 100644
--- a/docs/user/alerting/rule-types.asciidoc
+++ b/docs/user/alerting/rule-types.asciidoc
@@ -3,7 +3,8 @@
== Rule types
A rule is a set of <>, <>, and <> that enable notifications. {kib} provides rules built into the {stack} and rules registered by one of the {kib} apps.
-You can create most rules types in < {rules-ui}>>. For information on creating security rules, refer to {security-guide}/rules-ui-create.html[Create a detection rule].
+You can create most rules types in < {rules-ui}>>.
+Security rules must be defined in the Security app. For more information, refer to the documentation about {security-guide}/rules-ui-create.html[creating a detection rule].
[NOTE]
==============================================
@@ -39,7 +40,7 @@ see {subscriptions}[the subscription page].
[[observability-rules]]
=== {observability} rules
-{observability} rules are categorized into APM and {user-experience}, Logs, Metrics, {stack-monitor-app}, and Uptime.
+{observability} rules detect complex conditions in your observability data and create alerts when a rule's conditions are met. For example, you can create a rule that detects when the value of a metric exceeds a specified threshold or when an anomaly occurs on a system or service you are monitoring. For more information, refer to {observability-guide}/create-alerts.html[Alerting].
[NOTE]
==============================================
@@ -47,27 +48,6 @@ If you create a rule in the {observability} app, its alerts are not visible in
*{stack-manage-app} > {rules-ui}*. They are visible only in the {observability} app.
==============================================
-[cols="2*<"]
-|===
-
-
-| <>
-| Detect complex conditions in *APM* data and trigger built-in actions when the conditions are met.
-
-| {observability-guide}/logs-threshold-alert.html[Logs rules]
-| Detect complex conditions in the {logs-app}.
-
-| {observability-guide}/metrics-threshold-alert.html[Metrics rules]
-| Detect complex conditions in the {metrics-app}.
-
-| {observability-guide}/slo-burn-rate-alert.html[SLO burn rate rule]
-| Detect when the burn rate is above a defined threshold.
-
-| {observability-guide}/monitor-status-alert.html[Uptime rules]
-| Detect complex conditions in the {uptime-app}.
-
-|===
-
[float]
[[ml-rules]]
=== Machine learning rules
diff --git a/docs/user/alerting/rule-types/es-query.asciidoc b/docs/user/alerting/rule-types/es-query.asciidoc
index 9f17768d1d66..99c0e6f96530 100644
--- a/docs/user/alerting/rule-types/es-query.asciidoc
+++ b/docs/user/alerting/rule-types/es-query.asciidoc
@@ -81,7 +81,10 @@ This option is not available when you use a grouping field.
Generally this value should be set to a value that is smaller than the time window, to avoid gaps in
detection.
-7. Select a scope value, which affects the <> that are required to access the rule.
+7. In the advanced options, you can change the number of consecutive runs that must meet the rule conditions before an alert occurs.
+ The default value is `1`.
+
+8. Select a scope value, which affects the <> that are required to access the rule.
For example when it's set to `Stack Rules`, you must have the appropriate *Management > {stack-rules-feature}* feature privileges to view or edit the rule.
[float]
diff --git a/docs/user/alerting/rule-types/geo-rule-types.asciidoc b/docs/user/alerting/rule-types/geo-rule-types.asciidoc
index 22c002960135..af26780a3a6a 100644
--- a/docs/user/alerting/rule-types/geo-rule-types.asciidoc
+++ b/docs/user/alerting/rule-types/geo-rule-types.asciidoc
@@ -29,7 +29,10 @@ image::user/alerting/images/alert-types-tracking-containment-conditions.png[Crea
Boundaries data is expected to be static (not updating).
Boundaries are collected once when the rule is created and anytime after when boundary configuration is modified.
-. Set the check interval, which defines how often to evaluate the rule conditions.
+. Set the check interval, which defines how often to evaluate the rule conditions.
+
+. In the advanced options, you can change the number of consecutive runs that must meet the rule conditions before an alert occurs.
+ The default value is `1`.
Entity locations are queried to determine whether they are contained within any monitored boundaries.
Entity data should be somewhat "real time", meaning the dates of new documents aren't older than the current time minus the amount of the interval.
diff --git a/docs/user/alerting/rule-types/index-threshold.asciidoc b/docs/user/alerting/rule-types/index-threshold.asciidoc
index a91607c71600..a5f7c79e1be7 100644
--- a/docs/user/alerting/rule-types/index-threshold.asciidoc
+++ b/docs/user/alerting/rule-types/index-threshold.asciidoc
@@ -44,6 +44,9 @@ It determines how far back to search for documents and uses the time field set i
7. Set the check interval, which defines how often to evaluate the rule conditions.
Generally this value should be set to a value that is smaller than the time window, to avoid gaps in detection.
+8. In the advanced options, you can change the number of consecutive runs that must meet the rule conditions before an alert occurs.
+The default value is `1`.
+
If data is available and all clauses have been defined, a preview chart will render the threshold value and display a line chart showing the value for the last 30 intervals.
This can provide an indication of recent values and their proximity to the threshold, and help you tune the clauses.
diff --git a/nav-kibana-dev.docnav.json b/nav-kibana-dev.docnav.json
index d4eb3aaba6dd..f7f412e57636 100644
--- a/nav-kibana-dev.docnav.json
+++ b/nav-kibana-dev.docnav.json
@@ -239,6 +239,66 @@
}
]
},
+ {
+ "label": "Lens",
+ "pageId": "kibDevLensOverview",
+ "items": [
+ {
+ "label": "Lens Config API",
+ "id": "kibDevLensConfigAPI",
+ "items": [
+ {
+ "label": "Introduction",
+ "id": "kibDevLensConfigAPI"
+ },
+ {
+ "label": "Examples",
+ "id": "kibDevLensConfigAPIExamples"
+ },
+ {
+ "label": "Metric Chart",
+ "id": "kibDevLensConfigAPIMetric"
+ },
+ {
+ "label": "Gauge Chart",
+ "id": "kibDevLensConfigAPIGauge"
+ },
+ {
+ "label": "Pie Chart",
+ "id": "kibDevLensConfigAPIPie"
+ },
+ {
+ "label": "Mosaic Chart",
+ "id": "kibDevLensConfigAPIMosaic"
+ },
+ {
+ "label": "TreeMap Chart",
+ "id": "kibDevLensConfigAPITreeMap"
+ },
+ {
+ "label": "TagCloud Chart",
+ "id": "kibDevLensConfigAPITagCloud"
+ },
+ {
+ "label": "RegionMap Chart",
+ "id": "kibDevLensConfigAPIRegionMap"
+ },
+ {
+ "label": "Table Chart",
+ "id": "kibDevLensConfigAPITable"
+ },
+ {
+ "label": "Heatmap Chart",
+ "id": "kibDevLensConfigAPIHeatmap"
+ },
+ {
+ "label": "XY Chart",
+ "id": "kibDevLensConfigAPIXY"
+ }
+ ]
+ }
+ ]
+ },
{
"label": "Contributors Newsletters",
"items": [
diff --git a/package.json b/package.json
index 3ca448bdce30..5b5d4093509a 100644
--- a/package.json
+++ b/package.json
@@ -106,7 +106,7 @@
"@elastic/ecs": "^8.11.1",
"@elastic/elasticsearch": "^8.12.2",
"@elastic/ems-client": "8.5.1",
- "@elastic/eui": "93.2.0",
+ "@elastic/eui": "93.3.0",
"@elastic/filesaver": "1.1.2",
"@elastic/node-crypto": "1.2.1",
"@elastic/numeral": "^2.5.1",
@@ -588,6 +588,7 @@
"@kbn/no-data-page-plugin": "link:src/plugins/no_data_page",
"@kbn/notifications-plugin": "link:x-pack/plugins/notifications",
"@kbn/object-versioning": "link:packages/kbn-object-versioning",
+ "@kbn/observability-ai-assistant-app-plugin": "link:x-pack/plugins/observability_solution/observability_ai_assistant_app",
"@kbn/observability-ai-assistant-plugin": "link:x-pack/plugins/observability_solution/observability_ai_assistant",
"@kbn/observability-alert-details": "link:x-pack/packages/observability/alert_details",
"@kbn/observability-alerting-test-data": "link:x-pack/packages/observability/alerting_test_data",
@@ -1070,6 +1071,7 @@
"react-moment-proptypes": "^1.7.0",
"react-monaco-editor": "^0.54.0",
"react-popper-tooltip": "^3.1.1",
+ "react-recompose": "^0.33.0",
"react-redux": "^7.2.8",
"react-resizable": "^3.0.4",
"react-reverse-portal": "^2.1.0",
@@ -1082,7 +1084,6 @@
"react-use": "^15.3.8",
"react-virtualized": "^9.22.5",
"react-window": "^1.8.9",
- "recompose": "^0.30.0",
"reduce-reducers": "^1.0.4",
"redux": "^4.2.1",
"redux-actions": "^2.6.5",
@@ -1464,6 +1465,7 @@
"@types/react-grid-layout": "^1.3.2",
"@types/react-intl": "^2.3.15",
"@types/react-is": "^17.0.3",
+ "@types/react-recompose": "^0.33.4",
"@types/react-router": "^5.1.20",
"@types/react-router-config": "^5.0.7",
"@types/react-router-dom": "^5.3.3",
@@ -1471,7 +1473,6 @@
"@types/react-test-renderer": "^17.0.2",
"@types/react-virtualized": "^9.21.22",
"@types/react-window": "^1.8.5",
- "@types/recompose": "^0.30.10",
"@types/redux-actions": "^2.6.1",
"@types/redux-logger": "^3.0.8",
"@types/resolve": "^1.20.1",
@@ -1531,6 +1532,7 @@
"clean-webpack-plugin": "^3.0.0",
"cli-progress": "^3.12.0",
"cli-table3": "^0.6.1",
+ "content-security-policy-parser": "^0.6.0",
"copy-webpack-plugin": "^6.0.2",
"cpy": "^8.1.1",
"css-loader": "^3.4.2",
diff --git a/packages/content-management/table_list_view_table/src/table_list_view_table.tsx b/packages/content-management/table_list_view_table/src/table_list_view_table.tsx
index eef7c839a035..762c6eaf68b2 100644
--- a/packages/content-management/table_list_view_table/src/table_list_view_table.tsx
+++ b/packages/content-management/table_list_view_table/src/table_list_view_table.tsx
@@ -446,14 +446,14 @@ function TableListViewTableComp({
edit: {
enabled: false,
reason: i18n.translate('contentManagement.tableList.managedItemNoEdit', {
- defaultMessage: 'This item is managed by Elastic. Clone it before making changes.',
+ defaultMessage: 'Elastic manages this item. Clone it to make changes.',
}),
},
...ret[item.id],
delete: {
enabled: false,
reason: i18n.translate('contentManagement.tableList.managedItemNoDelete', {
- defaultMessage: 'This item is managed by Elastic. It cannot be deleted.',
+ defaultMessage: 'Elastic manages this item. Deleting it is not possible.',
}),
},
};
diff --git a/packages/core/saved-objects/core-saved-objects-server/docs/model_versions.md b/packages/core/saved-objects/core-saved-objects-server/docs/model_versions.md
index 31229e5eebc9..2790a2ebc820 100644
--- a/packages/core/saved-objects/core-saved-objects-server/docs/model_versions.md
+++ b/packages/core/saved-objects/core-saved-objects-server/docs/model_versions.md
@@ -988,7 +988,7 @@ describe('myIntegrationTest', () => {
afterEach(async () => {
if(testkit) {
// delete the indices between each tests to perform a migration again
- await testkit.tearsDown();
+ await testkit.tearDown();
}
});
diff --git a/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_bed.ts b/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_bed.ts
index aa8c4ab8df42..b3c22325f1de 100644
--- a/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_bed.ts
+++ b/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_bed.ts
@@ -40,7 +40,7 @@ import type { ModelVersionTestBed } from './types';
*
* afterEach(async () => {
* if(testkit) {
- * await testkit.tearsDown();
+ * await testkit.tearDown();
* }
* });
*
diff --git a/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_kit.ts b/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_kit.ts
index ee33208d793c..f986bb185cc4 100644
--- a/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_kit.ts
+++ b/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/test_kit.ts
@@ -121,7 +121,7 @@ export const prepareModelVersionTestKit = async ({
await runMigrations(secondMigrator);
- const tearsDown = async () => {
+ const tearDown = async () => {
await esClient.indices.delete({ index: `${kibanaIndex}_*`, allow_no_indices: true });
};
@@ -129,7 +129,7 @@ export const prepareModelVersionTestKit = async ({
esClient,
repositoryBefore,
repositoryAfter,
- tearsDown,
+ tearDown,
};
};
diff --git a/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/types.ts b/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/types.ts
index 37f22a297ee3..0e2e04a7bc6c 100644
--- a/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/types.ts
+++ b/packages/core/test-helpers/core-test-helpers-model-versions/src/test_bed/types.ts
@@ -121,7 +121,7 @@ export interface ModelVersionTestKit {
* Cleanup function that will delete the test index.
* Should be called before calling `testbed.prepareTestKit` again.
*/
- tearsDown: () => Promise;
+ tearDown: () => Promise;
}
/**
diff --git a/packages/home/sample_data_card/src/__snapshots__/sample_data_card.test.tsx.snap b/packages/home/sample_data_card/src/__snapshots__/sample_data_card.test.tsx.snap
index 269499f65547..76a56fb33c5e 100644
--- a/packages/home/sample_data_card/src/__snapshots__/sample_data_card.test.tsx.snap
+++ b/packages/home/sample_data_card/src/__snapshots__/sample_data_card.test.tsx.snap
@@ -57,56 +57,61 @@ exports[`SampleDataCard installed renders with app links 1`] = `
class="emotion-euiCard__footer"
>
-
-
-
+
+
+
+
+
@@ -171,47 +176,52 @@ exports[`SampleDataCard installed renders without app links 1`] = `
class="emotion-euiCard__footer"
>
-
-
-
-
+
-
- View data
+
+ View data
+
-
-
+
+
@@ -265,27 +275,32 @@ exports[`SampleDataCard not installed renders 1`] = `
class="emotion-euiCard__footer"
>
-
+
+
diff --git a/packages/home/sample_data_card/src/footer/index.tsx b/packages/home/sample_data_card/src/footer/index.tsx
index 3ef415d07c50..eaf00c8198b7 100644
--- a/packages/home/sample_data_card/src/footer/index.tsx
+++ b/packages/home/sample_data_card/src/footer/index.tsx
@@ -6,7 +6,7 @@
* Side Public License, v 1.
*/
-import React from 'react';
+import React, { useCallback } from 'react';
import { SampleDataSet, InstalledStatus } from '@kbn/home-sample-data-types';
import { INSTALLED_STATUS, UNINSTALLED_STATUS } from '../constants';
@@ -28,13 +28,27 @@ export interface Props {
* Displays the appropriate Footer component based on the status of the Sample Data Set.
*/
export const Footer = ({ sampleDataSet, onAction }: Props) => {
- if (sampleDataSet.status === INSTALLED_STATUS) {
- return onAction(id, UNINSTALLED_STATUS)} {...sampleDataSet} />;
- }
+ const renderContent = useCallback(() => {
+ if (sampleDataSet.status === INSTALLED_STATUS) {
+ return (
+ onAction(id, UNINSTALLED_STATUS)} {...sampleDataSet} />
+ );
+ }
- if (sampleDataSet.status === UNINSTALLED_STATUS) {
- return onAction(id, INSTALLED_STATUS)} {...sampleDataSet} />;
- }
+ if (sampleDataSet.status === UNINSTALLED_STATUS) {
+ return (
+ onAction(id, INSTALLED_STATUS)} {...sampleDataSet} />
+ );
+ }
- return ;
+ return ;
+ }, [onAction, sampleDataSet]);
+
+ return (
+ // the data-status attribute is added to solve issues with failing test,
+ // see https://github.com/elastic/kibana/issues/112103
+
+ {renderContent()}
+
+ );
};
diff --git a/packages/kbn-alerts-as-data-utils/src/field_maps/alert_field_map.ts b/packages/kbn-alerts-as-data-utils/src/field_maps/alert_field_map.ts
index 07ada8b7c06b..48320fd29e47 100644
--- a/packages/kbn-alerts-as-data-utils/src/field_maps/alert_field_map.ts
+++ b/packages/kbn-alerts-as-data-utils/src/field_maps/alert_field_map.ts
@@ -14,6 +14,7 @@ import {
ALERT_FLAPPING,
ALERT_FLAPPING_HISTORY,
ALERT_MAINTENANCE_WINDOW_IDS,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_INSTANCE_ID,
ALERT_LAST_DETECTED,
ALERT_REASON,
@@ -80,6 +81,11 @@ export const alertFieldMap = {
array: true,
required: false,
},
+ [ALERT_CONSECUTIVE_MATCHES]: {
+ type: 'long',
+ array: false,
+ required: false,
+ },
[ALERT_INSTANCE_ID]: {
type: 'keyword',
array: false,
diff --git a/packages/kbn-alerts-as-data-utils/src/schemas/generated/alert_schema.ts b/packages/kbn-alerts-as-data-utils/src/schemas/generated/alert_schema.ts
index b183ca5c792f..7d1f9304eaa3 100644
--- a/packages/kbn-alerts-as-data-utils/src/schemas/generated/alert_schema.ts
+++ b/packages/kbn-alerts-as-data-utils/src/schemas/generated/alert_schema.ts
@@ -86,6 +86,7 @@ const AlertOptional = rt.partial({
'event.kind': schemaString,
'kibana.alert.action_group': schemaString,
'kibana.alert.case_ids': schemaStringArray,
+ 'kibana.alert.consecutive_matches': schemaStringOrNumber,
'kibana.alert.duration.us': schemaStringOrNumber,
'kibana.alert.end': schemaDate,
'kibana.alert.flapping': schemaBoolean,
diff --git a/packages/kbn-alerts-as-data-utils/src/schemas/generated/security_schema.ts b/packages/kbn-alerts-as-data-utils/src/schemas/generated/security_schema.ts
index bc8150356e03..c57f9862f432 100644
--- a/packages/kbn-alerts-as-data-utils/src/schemas/generated/security_schema.ts
+++ b/packages/kbn-alerts-as-data-utils/src/schemas/generated/security_schema.ts
@@ -127,6 +127,7 @@ const SecurityAlertOptional = rt.partial({
'kibana.alert.ancestors.rule': schemaString,
'kibana.alert.building_block_type': schemaString,
'kibana.alert.case_ids': schemaStringArray,
+ 'kibana.alert.consecutive_matches': schemaStringOrNumber,
'kibana.alert.duration.us': schemaStringOrNumber,
'kibana.alert.end': schemaDate,
'kibana.alert.flapping': schemaBoolean,
diff --git a/packages/kbn-check-mappings-update-cli/current_fields.json b/packages/kbn-check-mappings-update-cli/current_fields.json
index fa70473b0b0a..696649555ffd 100644
--- a/packages/kbn-check-mappings-update-cli/current_fields.json
+++ b/packages/kbn-check-mappings-update-cli/current_fields.json
@@ -246,6 +246,7 @@
"controlGroupInput.controlStyle",
"controlGroupInput.ignoreParentSettingsJSON",
"controlGroupInput.panelsJSON",
+ "controlGroupInput.showApplySelections",
"description",
"hits",
"kibanaSavedObjectMeta",
diff --git a/packages/kbn-check-mappings-update-cli/current_mappings.json b/packages/kbn-check-mappings-update-cli/current_mappings.json
index 5bfe7f6f20de..93894be3d136 100644
--- a/packages/kbn-check-mappings-update-cli/current_mappings.json
+++ b/packages/kbn-check-mappings-update-cli/current_mappings.json
@@ -837,6 +837,11 @@
"panelsJSON": {
"index": false,
"type": "text"
+ },
+ "showApplySelections": {
+ "doc_values": false,
+ "index": false,
+ "type": "boolean"
}
}
},
diff --git a/packages/kbn-es/src/cli_commands/serverless.ts b/packages/kbn-es/src/cli_commands/serverless.ts
index dabd6906cebb..f74eeb033e9a 100644
--- a/packages/kbn-es/src/cli_commands/serverless.ts
+++ b/packages/kbn-es/src/cli_commands/serverless.ts
@@ -92,7 +92,7 @@ export const serverless: Command = {
string: ['projectType', 'tag', 'image', 'basePath', 'resources', 'host', 'kibanaUrl'],
boolean: ['clean', 'ssl', 'kill', 'background', 'skipTeardown', 'waitForReady'],
- default: defaults,
+ default: { ...defaults, kibanaUrl: 'https://localhost:5601/' },
}) as unknown as ServerlessOptions;
if (!options.projectType) {
diff --git a/packages/kbn-journeys/journey/journey_ftr_harness.ts b/packages/kbn-journeys/journey/journey_ftr_harness.ts
index 7becb99f3970..4b1a69757067 100644
--- a/packages/kbn-journeys/journey/journey_ftr_harness.ts
+++ b/packages/kbn-journeys/journey/journey_ftr_harness.ts
@@ -58,6 +58,10 @@ export class JourneyFtrHarness {
private apm: apmNode.Agent | null = null;
+ // journey can be run to collect EBT/APM metrics or just as a functional test
+ // TEST_PERFORMANCE_PHASE is defined via scripts/run_perfomance.js run only
+ private readonly isPerformanceRun = process.env.TEST_PERFORMANCE_PHASE || false;
+
// Update the Telemetry and APM global labels to link traces with journey
private async updateTelemetryAndAPMLabels(labels: { [k: string]: string }) {
this.log.info(`Updating telemetry & APM labels: ${JSON.stringify(labels)}`);
@@ -162,7 +166,12 @@ export class JourneyFtrHarness {
// Loading test data
await Promise.all([
asyncForEach(this.journeyConfig.getEsArchives(), async (esArchive) => {
- await this.esArchiver.load(esArchive);
+ if (this.isPerformanceRun) {
+ // we start Elasticsearch only once and keep ES data persisitent.
+ await this.esArchiver.loadIfNeeded(esArchive);
+ } else {
+ await this.esArchiver.load(esArchive);
+ }
}),
asyncForEach(this.journeyConfig.getKbnArchives(), async (kbnArchive) => {
await this.kibanaServer.importExport.load(kbnArchive);
@@ -233,7 +242,10 @@ export class JourneyFtrHarness {
await this.teardownApm();
await Promise.all([
asyncForEach(this.journeyConfig.getEsArchives(), async (esArchive) => {
- await this.esArchiver.unload(esArchive);
+ // Keep ES data when journey is run twice (avoid unload after "Warmup" phase)
+ if (!this.isPerformanceRun) {
+ await this.esArchiver.unload(esArchive);
+ }
}),
asyncForEach(this.journeyConfig.getKbnArchives(), async (kbnArchive) => {
await this.kibanaServer.importExport.unload(kbnArchive);
diff --git a/packages/kbn-optimizer/limits.yml b/packages/kbn-optimizer/limits.yml
index 8b90dcbbe1a0..d943aa0f7e5a 100644
--- a/packages/kbn-optimizer/limits.yml
+++ b/packages/kbn-optimizer/limits.yml
@@ -104,7 +104,8 @@ pageLoadAssetSize:
newsfeed: 42228
noDataPage: 5000
observability: 115443
- observabilityAIAssistant: 25000
+ observabilityAIAssistant: 58230
+ observabilityAIAssistantApp: 27680
observabilityLogsExplorer: 46650
observabilityOnboarding: 19573
observabilityShared: 72039
diff --git a/packages/kbn-rule-data-utils/src/default_alerts_as_data.ts b/packages/kbn-rule-data-utils/src/default_alerts_as_data.ts
index 7c0827147813..dfd51bf73758 100644
--- a/packages/kbn-rule-data-utils/src/default_alerts_as_data.ts
+++ b/packages/kbn-rule-data-utils/src/default_alerts_as_data.ts
@@ -43,6 +43,9 @@ const ALERT_FLAPPING_HISTORY = `${ALERT_NAMESPACE}.flapping_history` as const;
// kibana.alert.maintenance_window_ids - IDs of maintenance windows that are affecting this alert
const ALERT_MAINTENANCE_WINDOW_IDS = `${ALERT_NAMESPACE}.maintenance_window_ids` as const;
+// kibana.alert.consecutive_matches - count of consecutive times the alert has been active
+const ALERT_CONSECUTIVE_MATCHES = `${ALERT_NAMESPACE}.consecutive_matches` as const;
+
// kibana.alert.instance.id - alert ID, also known as alert instance ID
const ALERT_INSTANCE_ID = `${ALERT_NAMESPACE}.instance.id` as const;
@@ -120,6 +123,7 @@ const fields = {
ALERT_FLAPPING,
ALERT_FLAPPING_HISTORY,
ALERT_MAINTENANCE_WINDOW_IDS,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_INSTANCE_ID,
ALERT_LAST_DETECTED,
ALERT_REASON,
@@ -160,6 +164,7 @@ export {
ALERT_FLAPPING,
ALERT_FLAPPING_HISTORY,
ALERT_MAINTENANCE_WINDOW_IDS,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_INSTANCE_ID,
ALERT_LAST_DETECTED,
ALERT_REASON,
diff --git a/packages/kbn-securitysolution-grouping/src/components/grouping.test.tsx b/packages/kbn-securitysolution-grouping/src/components/grouping.test.tsx
index 0cf16ae4c821..1a40a9d22b34 100644
--- a/packages/kbn-securitysolution-grouping/src/components/grouping.test.tsx
+++ b/packages/kbn-securitysolution-grouping/src/components/grouping.test.tsx
@@ -185,4 +185,31 @@ describe('grouping container', () => {
true
);
});
+
+ describe('groupsUnit', () => {
+ it('renders default groupsUnit text correctly', () => {
+ const { getByTestId } = render(
+
+
+
+ );
+ expect(getByTestId('group-count').textContent).toBe('3 groups');
+ });
+ it('calls custom groupsUnit callback correctly', () => {
+ // Provide a custom groupsUnit function in testProps
+ const customGroupsUnit = jest.fn(
+ (n, parentSelectedGroup, hasNullGroup) => `${n} custom units`
+ );
+ const customProps = { ...testProps, groupsUnit: customGroupsUnit };
+
+ const { getByTestId } = render(
+
+
+
+ );
+
+ expect(customGroupsUnit).toHaveBeenCalledWith(3, testProps.selectedGroup, true);
+ expect(getByTestId('group-count').textContent).toBe('3 custom units');
+ });
+ });
});
diff --git a/packages/kbn-securitysolution-grouping/src/components/grouping.tsx b/packages/kbn-securitysolution-grouping/src/components/grouping.tsx
index 5ae1037d9edb..2b7c0ea4a9dd 100644
--- a/packages/kbn-securitysolution-grouping/src/components/grouping.tsx
+++ b/packages/kbn-securitysolution-grouping/src/components/grouping.tsx
@@ -52,6 +52,7 @@ export interface GroupingProps {
count?: number | undefined
) => void;
unit?: (n: number) => string;
+ groupsUnit?: (n: number, parentSelectedGroup: string, hasNullGroup: boolean) => string;
}
const GroupingComponent = ({
@@ -74,6 +75,7 @@ const GroupingComponent = ({
takeActionItems,
tracker,
unit = defaultUnit,
+ groupsUnit = GROUPS_UNIT,
}: GroupingProps) => {
const [trigger, setTrigger] = useState>(
{}
@@ -85,10 +87,14 @@ const GroupingComponent = ({
}, [unitCount, unit]);
const groupCount = useMemo(() => data?.groupsCount?.value ?? 0, [data?.groupsCount?.value]);
- const groupCountText = useMemo(
- () => `${groupCount.toLocaleString()} ${GROUPS_UNIT(groupCount)}`,
- [groupCount]
- );
+ const groupCountText = useMemo(() => {
+ const hasNullGroup =
+ data?.groupByFields?.buckets?.some(
+ (groupBucket: GroupingBucket) => groupBucket.isNullGroup
+ ) || false;
+
+ return `${groupsUnit(groupCount, selectedGroup, hasNullGroup)}`;
+ }, [data?.groupByFields?.buckets, groupCount, groupsUnit, selectedGroup]);
const groupPanels = useMemo(
() =>
diff --git a/packages/kbn-securitysolution-grouping/src/components/translations.ts b/packages/kbn-securitysolution-grouping/src/components/translations.ts
index de5337db904d..e319a18e0f25 100644
--- a/packages/kbn-securitysolution-grouping/src/components/translations.ts
+++ b/packages/kbn-securitysolution-grouping/src/components/translations.ts
@@ -10,8 +10,8 @@ import { i18n } from '@kbn/i18n';
export const GROUPS_UNIT = (totalCount: number) =>
i18n.translate('grouping.total.unit', {
- values: { totalCount },
- defaultMessage: `{totalCount, plural, =1 {group} other {groups}}`,
+ values: { totalCount, groupCount: totalCount.toLocaleString() },
+ defaultMessage: `{groupCount} {totalCount, plural, =1 {group} other {groups}}`,
});
export const TAKE_ACTION = i18n.translate('grouping.additionalActions.takeAction', {
diff --git a/packages/kbn-securitysolution-grouping/src/hooks/use_grouping.tsx b/packages/kbn-securitysolution-grouping/src/hooks/use_grouping.tsx
index 38ada10a74b9..af3ae458de28 100644
--- a/packages/kbn-securitysolution-grouping/src/hooks/use_grouping.tsx
+++ b/packages/kbn-securitysolution-grouping/src/hooks/use_grouping.tsx
@@ -31,7 +31,7 @@ export interface UseGrouping {
*/
type StaticGroupingProps = Pick<
GroupingProps,
- 'groupPanelRenderer' | 'groupStatsRenderer' | 'onGroupToggle' | 'unit'
+ 'groupPanelRenderer' | 'groupStatsRenderer' | 'onGroupToggle' | 'unit' | 'groupsUnit'
>;
/** Type for dynamic grouping component props where T is the consumer `GroupingAggregation`
diff --git a/packages/kbn-unified-data-table/src/utils/get_render_cell_value.test.tsx b/packages/kbn-unified-data-table/src/utils/get_render_cell_value.test.tsx
index 9e211bee1cad..4b00a85a29f3 100644
--- a/packages/kbn-unified-data-table/src/utils/get_render_cell_value.test.tsx
+++ b/packages/kbn-unified-data-table/src/utils/get_render_cell_value.test.tsx
@@ -166,7 +166,7 @@ describe('Unified data table cell rendering', function () {
/>
);
expect(component.html()).toMatchInlineSnapshot(
- `""`
+ `""`
);
});
@@ -193,7 +193,7 @@ describe('Unified data table cell rendering', function () {
/>
);
expect(component.html()).toMatchInlineSnapshot(
- `""`
+ `""`
);
findTestSubject(component, 'docTableClosePopover').simulate('click');
expect(closePopoverMockFn).toHaveBeenCalledTimes(1);
diff --git a/renovate.json b/renovate.json
index 724f2a4f0803..70595b721b87 100644
--- a/renovate.json
+++ b/renovate.json
@@ -649,6 +649,25 @@
"Team:Monitoring"
],
"enabled": true
+ },
+ {
+ "groupName": "csp",
+ "packageNames": [
+ "content-security-policy-parser"
+ ],
+ "reviewers": [
+ "team:kibana-security",
+ "team:kibana-core"
+ ],
+ "matchBaseBranches": [
+ "main"
+ ],
+ "labels": [
+ "release_note:skip",
+ "backport:skip",
+ "ci:serverless-test-all"
+ ],
+ "enabled": true
}
]
}
diff --git a/scripts/es.js b/scripts/es.js
index 1cee27b7685b..1fcd221c9790 100644
--- a/scripts/es.js
+++ b/scripts/es.js
@@ -20,7 +20,6 @@ kbnEs
'source-path': resolve(__dirname, '../../elasticsearch'),
'base-path': resolve(__dirname, '../.es'),
ssl: false,
- kibanaUrl: 'https://localhost:5601/',
})
.catch(function (e) {
console.error(e);
diff --git a/src/cli/cli.js b/src/cli/cli.js
index f6bce6a8aefa..feb950ac5945 100644
--- a/src/cli/cli.js
+++ b/src/cli/cli.js
@@ -10,6 +10,7 @@ import _ from 'lodash';
import { kibanaPackageJson as pkg } from '@kbn/repo-info';
import Command from './command';
import serveCommand from './serve/serve';
+import profiler from './profiler/profiler';
const argv = process.argv.slice();
const program = new Command('bin/kibana');
@@ -23,6 +24,7 @@ program
// attach commands
serveCommand(program);
+profiler(program);
program
.command('help ')
diff --git a/src/cli/profiler/profiler.js b/src/cli/profiler/profiler.js
new file mode 100644
index 000000000000..d7a7f7c8def3
--- /dev/null
+++ b/src/cli/profiler/profiler.js
@@ -0,0 +1,87 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import { writeFile } from 'fs';
+import getopts from 'getopts';
+import { join } from 'path';
+import { Session } from 'node:inspector';
+import { threadId } from 'node:worker_threads';
+import { promisify } from 'util';
+
+class Profiler {
+ #counter = 0;
+ #path;
+ #session;
+
+ constructor() {
+ const execOpts = getopts(process.execArgv);
+ const envOpts = getopts(process.env.NODE_OPTIONS ? process.env.NODE_OPTIONS.split(/\s+/) : []);
+ this.#path = execOpts['diagnostic-dir'] || envOpts['diagnostic-dir'] || process.cwd();
+ }
+
+ #getPath() {
+ const now = new Date();
+
+ const year = now.getFullYear();
+ const month = String(now.getMonth() + 1).padStart(2, '0');
+ const day = String(now.getDate()).padStart(2, '0');
+ const hours = String(now.getHours()).padStart(2, '0');
+ const minutes = String(now.getMinutes()).padStart(2, '0');
+ const seconds = String(now.getSeconds()).padStart(2, '0');
+
+ const date = `${year}${month}${day}`;
+ const time = `${hours}${minutes}${seconds}`;
+ const pid = process.pid;
+ const thread = threadId;
+ const serial = (++this.#counter).toString().padStart(3, '0');
+
+ return join(this.#path, `CPU.${date}.${time}.${pid}.${thread}.${serial}.cpuprofile`);
+ }
+
+ async #start() {
+ this.#session = new Session();
+ this.#session.connect();
+ this.#session.post = this.#session.post.bind(this.#session);
+
+ await promisify(this.#session.post)('Profiler.enable');
+ await promisify(this.#session.post)('Profiler.start');
+ }
+
+ async #stop() {
+ try {
+ const { profile } = await promisify(this.#session.post)('Profiler.stop');
+ const path = this.#getPath();
+ await promisify(writeFile)(path, JSON.stringify(profile));
+ } finally {
+ this.#session.disconnect();
+ this.#session = undefined;
+ }
+ }
+
+ isRunning() {
+ return this.#session !== undefined;
+ }
+
+ toggle() {
+ return this.isRunning() ? this.#stop() : this.#start();
+ }
+}
+
+export default function (program) {
+ program
+ .option('--profiler.signal ', 'Start/stop CPU profiling on ')
+ .on('option:profiler.signal', function (signal) {
+ if (!signal) {
+ return;
+ }
+
+ const profiler = new Profiler();
+ process.removeAllListeners(signal);
+ process.on(signal, profiler.toggle.bind(profiler));
+ });
+}
diff --git a/src/cli/tsconfig.json b/src/cli/tsconfig.json
index ebbbc19f75c7..29903572a685 100644
--- a/src/cli/tsconfig.json
+++ b/src/cli/tsconfig.json
@@ -5,6 +5,7 @@
},
"include": [
"keystore/**/*",
+ "profiler/**/*",
"serve/**/*",
"*.js",
],
diff --git a/src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts b/src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts
index fdf7ba4c9f42..de599acd8f3f 100644
--- a/src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts
+++ b/src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts
@@ -82,7 +82,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
"connector_token": "5a9ac29fe9c740eb114e9c40517245c71706b005",
"core-usage-stats": "b3c04da317c957741ebcdedfea4524049fdc79ff",
"csp-rule-template": "c151324d5f85178169395eecb12bac6b96064654",
- "dashboard": "0611794ce10d25a36da0770c91376c575e92e8f2",
+ "dashboard": "211e9ca30f5a95d5f3c27b1bf2b58e6cfa0c9ae9",
"endpoint:user-artifact-manifest": "1c3533161811a58772e30cdc77bac4631da3ef2b",
"enterprise_search_telemetry": "9ac912e1417fc8681e0cd383775382117c9e3d3d",
"epm-packages": "c23d3d00c051a08817335dba26f542b64b18a56a",
diff --git a/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker b/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker
index 0f554570f984..dd41a333d3ba 100755
--- a/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker
+++ b/src/dev/build/tasks/os_packages/docker_generator/resources/base/bin/kibana-docker
@@ -136,6 +136,7 @@ kibana_vars=(
ops.interval
path.data
pid.file
+ profiler.signal
regionmap
savedObjects.maxImportExportSize
savedObjects.maxImportPayloadBytes
diff --git a/src/dev/build/tasks/os_packages/docker_generator/templates/base/Dockerfile b/src/dev/build/tasks/os_packages/docker_generator/templates/base/Dockerfile
index d0bf01692ae8..1869086b51ab 100644
--- a/src/dev/build/tasks/os_packages/docker_generator/templates/base/Dockerfile
+++ b/src/dev/build/tasks/os_packages/docker_generator/templates/base/Dockerfile
@@ -160,6 +160,7 @@ COPY --chown=1000:0 config/serverless.security.yml /usr/share/kibana/config/serv
# Supportability enhancement: enable capturing heap snapshots. See https://nodejs.org/api/cli.html#--heapsnapshot-signalsignal
RUN /usr/bin/echo -e '\n--heapsnapshot-signal=SIGUSR2' >> config/node.options
RUN /usr/bin/echo '--diagnostic-dir=./data' >> config/node.options
+ENV PROFILER_SIGNAL=SIGUSR1
{{/serverless}}
{{^opensslLegacyProvider}}
RUN sed 's/\(--openssl-legacy-provider\)/#\1/' -i config/node.options
diff --git a/src/dev/buildkite_migration/rewrite_buildkite_agent_rules.ts b/src/dev/buildkite_migration/rewrite_buildkite_agent_rules.ts
index 00843a474d51..64d94bda5a97 100644
--- a/src/dev/buildkite_migration/rewrite_buildkite_agent_rules.ts
+++ b/src/dev/buildkite_migration/rewrite_buildkite_agent_rules.ts
@@ -50,6 +50,7 @@ interface GobldGCPConfig {
enableSecureBoot?: boolean;
enableNestedVirtualization?: boolean;
image: string;
+ provider: 'gcp';
localSsds?: number;
localSsdInterface?: string;
machineType: string;
@@ -75,16 +76,32 @@ if (!fs.existsSync('data/agents.json')) {
* rewrites all agent targeting rules from the shorthands to the full targeting syntax
*/
run(
- async ({ log, flags }) => {
+ async ({ log, flags, flagsReader }) => {
+ const filterExpressions = flagsReader.getPositionals();
+
const paths = await globby('.buildkite/**/*.yml', {
cwd: REPO_ROOT,
onlyFiles: true,
gitignore: true,
});
+ const pathsFiltered =
+ filterExpressions.length === 0
+ ? paths
+ : paths.filter((path) => {
+ return filterExpressions.some((expression) => path.includes(expression));
+ });
+
+ if (pathsFiltered.length === 0) {
+ log.warning('No .yml files found to rewrite after filtering.');
+ return;
+ }
+
+ log.info('Applying rewrite to the following paths: \n', pathsFiltered.join('\n'));
+
const failedRewrites: Array<{ path: string; error: Error }> = [];
- const rewritePromises: Array> = paths.map((ymlPath) => {
+ const rewritePromises: Array> = pathsFiltered.map((ymlPath) => {
return rewriteFile(ymlPath, log).catch((e) => {
// eslint-disable-next-line no-console
console.error('Failed to rewrite: ' + ymlPath, e);
@@ -193,6 +210,7 @@ function getFullAgentTargetingRule(queue: string): GobldGCPConfig {
return removeNullish({
image: 'family/kibana-ubuntu-2004',
imageProject: 'elastic-images-qa',
+ provider: 'gcp',
assignExternalIP: agent.disableExternalIp === true ? false : undefined,
diskSizeGb: agent.diskSizeGb,
diskType: agent.diskType,
diff --git a/src/dev/license_checker/config.ts b/src/dev/license_checker/config.ts
index e21de7b953d0..4b7738bcc0ab 100644
--- a/src/dev/license_checker/config.ts
+++ b/src/dev/license_checker/config.ts
@@ -85,7 +85,7 @@ export const LICENSE_OVERRIDES = {
'jsts@1.6.2': ['Eclipse Distribution License - v 1.0'], // cf. https://github.com/bjornharrtell/jsts
'@mapbox/jsonlint-lines-primitives@2.0.2': ['MIT'], // license in readme https://github.com/tmcw/jsonlint
'@elastic/ems-client@8.5.1': ['Elastic License 2.0'],
- '@elastic/eui@93.2.0': ['SSPL-1.0 OR Elastic License 2.0'],
+ '@elastic/eui@93.3.0': ['SSPL-1.0 OR Elastic License 2.0'],
'language-subtag-registry@0.3.21': ['CC-BY-4.0'], // retired ODC‑By license https://github.com/mattcg/language-subtag-registry
'buffers@0.1.1': ['MIT'], // license in importing module https://www.npmjs.com/package/binary
'@bufbuild/protobuf@1.2.1': ['Apache-2.0'], // license (Apache-2.0 AND BSD-3-Clause)
diff --git a/src/plugins/ai_assistant_management/observability/public/plugin.ts b/src/plugins/ai_assistant_management/observability/public/plugin.ts
index 36785ebe096c..2f72424cc18e 100644
--- a/src/plugins/ai_assistant_management/observability/public/plugin.ts
+++ b/src/plugins/ai_assistant_management/observability/public/plugin.ts
@@ -14,8 +14,8 @@ import { ServerlessPluginStart } from '@kbn/serverless/public';
import { EnterpriseSearchPublicStart } from '@kbn/enterprise-search-plugin/public';
import type {
- ObservabilityAIAssistantPluginSetup,
- ObservabilityAIAssistantPluginStart,
+ ObservabilityAIAssistantPublicSetup,
+ ObservabilityAIAssistantPublicStart,
} from '@kbn/observability-ai-assistant-plugin/public';
// eslint-disable-next-line @typescript-eslint/no-empty-interface
@@ -27,11 +27,11 @@ export interface AiAssistantManagementObservabilityPluginStart {}
export interface SetupDependencies {
management: ManagementSetup;
home?: HomePublicPluginSetup;
- observabilityAIAssistant?: ObservabilityAIAssistantPluginSetup;
+ observabilityAIAssistant?: ObservabilityAIAssistantPublicSetup;
}
export interface StartDependencies {
- observabilityAIAssistant?: ObservabilityAIAssistantPluginStart;
+ observabilityAIAssistant?: ObservabilityAIAssistantPublicStart;
serverless?: ServerlessPluginStart;
enterpriseSearch?: EnterpriseSearchPublicStart;
}
diff --git a/src/plugins/controls/common/control_group/control_group_panel_diff_system.ts b/src/plugins/controls/common/control_group/control_group_panel_diff_system.ts
index c07713dd3228..5c1e5746ea77 100644
--- a/src/plugins/controls/common/control_group/control_group_panel_diff_system.ts
+++ b/src/plugins/controls/common/control_group/control_group_panel_diff_system.ts
@@ -16,7 +16,11 @@ import { TimeSliderControlEmbeddableInput, TIME_SLIDER_CONTROL } from '../time_s
import { ControlPanelState } from './types';
interface DiffSystem {
- getPanelIsEqual: (initialInput: ControlPanelState, newInput: ControlPanelState) => boolean;
+ getPanelIsEqual: (
+ initialInput: ControlPanelState,
+ newInput: ControlPanelState,
+ compareSelections?: boolean
+ ) => boolean;
}
export const genericControlPanelDiffSystem: DiffSystem = {
@@ -29,7 +33,7 @@ export const ControlPanelDiffSystems: {
[key: string]: DiffSystem;
} = {
[RANGE_SLIDER_CONTROL]: {
- getPanelIsEqual: (initialInput, newInput) => {
+ getPanelIsEqual: (initialInput, newInput, compareSelections) => {
if (!deepEqual(omit(initialInput, 'explicitInput'), omit(newInput, 'explicitInput'))) {
return false;
}
@@ -38,11 +42,11 @@ export const ControlPanelDiffSystems: {
initialInput.explicitInput;
const { value: valueB = ['', ''], ...inputB }: Partial =
newInput.explicitInput;
- return isEqual(valueA, valueB) && deepEqual(inputA, inputB);
+ return (compareSelections ? isEqual(valueA, valueB) : true) && deepEqual(inputA, inputB);
},
},
[OPTIONS_LIST_CONTROL]: {
- getPanelIsEqual: (initialInput, newInput) => {
+ getPanelIsEqual: (initialInput, newInput, compareSelections) => {
if (!deepEqual(omit(initialInput, 'explicitInput'), omit(newInput, 'explicitInput'))) {
return false;
}
@@ -75,22 +79,24 @@ export const ControlPanelDiffSystems: {
}: Partial = newInput.explicitInput;
return (
- Boolean(excludeA) === Boolean(excludeB) &&
Boolean(hideSortA) === Boolean(hideSortB) &&
Boolean(hideExistsA) === Boolean(hideExistsB) &&
Boolean(hideExcludeA) === Boolean(hideExcludeB) &&
Boolean(singleSelectA) === Boolean(singleSelectB) &&
- Boolean(existsSelectedA) === Boolean(existsSelectedB) &&
Boolean(runPastTimeoutA) === Boolean(runPastTimeoutB) &&
isEqual(searchTechniqueA ?? 'prefix', searchTechniqueB ?? 'prefix') &&
deepEqual(sortA ?? OPTIONS_LIST_DEFAULT_SORT, sortB ?? OPTIONS_LIST_DEFAULT_SORT) &&
- isEqual(selectedA ?? [], selectedB ?? []) &&
+ (compareSelections
+ ? Boolean(excludeA) === Boolean(excludeB) &&
+ Boolean(existsSelectedA) === Boolean(existsSelectedB) &&
+ isEqual(selectedA ?? [], selectedB ?? [])
+ : true) &&
deepEqual(inputA, inputB)
);
},
},
[TIME_SLIDER_CONTROL]: {
- getPanelIsEqual: (initialInput, newInput) => {
+ getPanelIsEqual: (initialInput, newInput, compareSelections) => {
if (!deepEqual(omit(initialInput, 'explicitInput'), omit(newInput, 'explicitInput'))) {
return false;
}
@@ -107,10 +113,12 @@ export const ControlPanelDiffSystems: {
}: Partial = newInput.explicitInput;
return (
Boolean(isAnchoredA) === Boolean(isAnchoredB) &&
- Boolean(startA) === Boolean(startB) &&
- startA === startB &&
- Boolean(endA) === Boolean(endB) &&
- endA === endB
+ (compareSelections
+ ? Boolean(startA) === Boolean(startB) &&
+ startA === startB &&
+ Boolean(endA) === Boolean(endB) &&
+ endA === endB
+ : true)
);
},
},
diff --git a/src/plugins/controls/common/control_group/control_group_persistence.ts b/src/plugins/controls/common/control_group/control_group_persistence.ts
index 8c51c4a2212b..8e9a795c2ec4 100644
--- a/src/plugins/controls/common/control_group/control_group_persistence.ts
+++ b/src/plugins/controls/common/control_group/control_group_persistence.ts
@@ -44,6 +44,7 @@ export const getDefaultControlGroupInput = (): Omit =>
defaultControlGrow: DEFAULT_CONTROL_GROW,
controlStyle: DEFAULT_CONTROL_STYLE,
chainingSystem: 'HIERARCHICAL',
+ showApplySelections: false,
ignoreParentSettings: {
ignoreFilters: false,
ignoreQuery: false,
@@ -57,30 +58,29 @@ export const getDefaultControlGroupPersistableInput = (): PersistableControlGrou
export const persistableControlGroupInputIsEqual = (
a: PersistableControlGroupInput | undefined,
- b: PersistableControlGroupInput | undefined
+ b: PersistableControlGroupInput | undefined,
+ compareSelections: boolean = true
) => {
- const defaultInput = getDefaultControlGroupInput();
+ const defaultInput = getDefaultControlGroupPersistableInput();
const inputA = {
...defaultInput,
- ...pick(a, ['panels', 'chainingSystem', 'controlStyle', 'ignoreParentSettings']),
+ ...pick(a, persistableControlGroupInputKeys),
};
const inputB = {
...defaultInput,
- ...pick(b, ['panels', 'chainingSystem', 'controlStyle', 'ignoreParentSettings']),
+ ...pick(b, persistableControlGroupInputKeys),
};
- if (
- getPanelsAreEqual(inputA.panels, inputB.panels) &&
- deepEqual(omit(inputA, 'panels'), omit(inputB, 'panels'))
- )
- return true;
-
- return false;
+ return (
+ getPanelsAreEqual(inputA.panels, inputB.panels, compareSelections) &&
+ deepEqual(omit(inputA, ['panels']), omit(inputB, ['panels']))
+ );
};
const getPanelsAreEqual = (
originalPanels: PersistableControlGroupInput['panels'],
- newPanels: PersistableControlGroupInput['panels']
+ newPanels: PersistableControlGroupInput['panels'],
+ compareSelections: boolean
) => {
const originalPanelIds = Object.keys(originalPanels);
const newPanelIds = Object.keys(newPanels);
@@ -94,7 +94,8 @@ const getPanelsAreEqual = (
const panelIsEqual = ControlPanelDiffSystems[newPanelType]
? ControlPanelDiffSystems[newPanelType].getPanelIsEqual(
originalPanels[panelId],
- newPanels[panelId]
+ newPanels[panelId],
+ compareSelections
)
: genericControlPanelDiffSystem.getPanelIsEqual(originalPanels[panelId], newPanels[panelId]);
if (!panelIsEqual) return false;
@@ -108,6 +109,7 @@ export const controlGroupInputToRawControlGroupAttributes = (
return {
controlStyle: controlGroupInput.controlStyle,
chainingSystem: controlGroupInput.chainingSystem,
+ showApplySelections: controlGroupInput.showApplySelections,
panelsJSON: JSON.stringify(controlGroupInput.panels),
ignoreParentSettingsJSON: JSON.stringify(controlGroupInput.ignoreParentSettings),
};
@@ -131,8 +133,13 @@ export const rawControlGroupAttributesToControlGroupInput = (
rawControlGroupAttributes: RawControlGroupAttributes
): PersistableControlGroupInput | undefined => {
const defaultControlGroupInput = getDefaultControlGroupInput();
- const { chainingSystem, controlStyle, ignoreParentSettingsJSON, panelsJSON } =
- rawControlGroupAttributes;
+ const {
+ chainingSystem,
+ controlStyle,
+ showApplySelections,
+ ignoreParentSettingsJSON,
+ panelsJSON,
+ } = rawControlGroupAttributes;
const panels = safeJSONParse(panelsJSON);
const ignoreParentSettings =
safeJSONParse(ignoreParentSettingsJSON);
@@ -140,6 +147,7 @@ export const rawControlGroupAttributesToControlGroupInput = (
...defaultControlGroupInput,
...(chainingSystem ? { chainingSystem } : {}),
...(controlStyle ? { controlStyle } : {}),
+ ...(showApplySelections ? { showApplySelections } : {}),
...(ignoreParentSettings ? { ignoreParentSettings } : {}),
...(panels ? { panels } : {}),
};
@@ -152,6 +160,7 @@ export const rawControlGroupAttributesToSerializable = (
return {
chainingSystem: rawControlGroupAttributes?.chainingSystem,
controlStyle: rawControlGroupAttributes?.controlStyle ?? defaultControlGroupInput.controlStyle,
+ showApplySelections: rawControlGroupAttributes?.showApplySelections,
ignoreParentSettings: safeJSONParse(rawControlGroupAttributes?.ignoreParentSettingsJSON) ?? {},
panels: safeJSONParse(rawControlGroupAttributes?.panelsJSON) ?? {},
};
@@ -163,6 +172,7 @@ export const serializableToRawControlGroupAttributes = (
return {
controlStyle: serializable.controlStyle as RawControlGroupAttributes['controlStyle'],
chainingSystem: serializable.chainingSystem as RawControlGroupAttributes['chainingSystem'],
+ showApplySelections: Boolean(serializable.showApplySelections),
ignoreParentSettingsJSON: JSON.stringify(serializable.ignoreParentSettings),
panelsJSON: JSON.stringify(serializable.panels),
};
diff --git a/src/plugins/controls/common/control_group/mocks.tsx b/src/plugins/controls/common/control_group/mocks.tsx
index fb469a53b1a2..a39812dfc019 100644
--- a/src/plugins/controls/common/control_group/mocks.tsx
+++ b/src/plugins/controls/common/control_group/mocks.tsx
@@ -7,9 +7,10 @@
*/
import { EmbeddablePersistableStateService } from '@kbn/embeddable-plugin/common';
-import { ControlGroupInput } from './types';
import { getDefaultControlGroupInput } from '..';
import { ControlGroupContainerFactory } from '../../public';
+import { ControlGroupComponentState } from '../../public/control_group/types';
+import { ControlGroupInput } from './types';
export const mockControlGroupInput = (partial?: Partial): ControlGroupInput => ({
id: 'mocked_control_group',
@@ -48,14 +49,25 @@ export const mockControlGroupInput = (partial?: Partial): Con
...(partial ?? {}),
});
-export const mockControlGroupContainer = async (explicitInput?: Partial) => {
+export const mockControlGroupContainer = async (
+ explicitInput?: Partial,
+ initialComponentState?: Partial
+) => {
const controlGroupFactoryStub = new ControlGroupContainerFactory(
{} as unknown as EmbeddablePersistableStateService
);
- const controlGroupContainer = await controlGroupFactoryStub.create({
+ const input: ControlGroupInput = {
id: 'mocked-control-group',
...getDefaultControlGroupInput(),
...explicitInput,
+ };
+ const controlGroupContainer = await controlGroupFactoryStub.create(input, undefined, {
+ ...initialComponentState,
+ lastSavedInput: {
+ panels: input.panels,
+ chainingSystem: 'HIERARCHICAL',
+ controlStyle: 'twoLine',
+ },
});
return controlGroupContainer;
diff --git a/src/plugins/controls/common/control_group/types.ts b/src/plugins/controls/common/control_group/types.ts
index eeda06437cd5..5852dc392a6c 100644
--- a/src/plugins/controls/common/control_group/types.ts
+++ b/src/plugins/controls/common/control_group/types.ts
@@ -31,6 +31,7 @@ export interface ControlGroupInput extends EmbeddableInput, ControlInput {
defaultControlGrow?: boolean;
controlStyle: ControlStyle;
panels: ControlsPanels;
+ showApplySelections?: boolean;
}
/**
@@ -39,9 +40,9 @@ export interface ControlGroupInput extends EmbeddableInput, ControlInput {
export const persistableControlGroupInputKeys: Array<
keyof Pick<
ControlGroupInput,
- 'panels' | 'chainingSystem' | 'controlStyle' | 'ignoreParentSettings'
+ 'panels' | 'chainingSystem' | 'controlStyle' | 'ignoreParentSettings' | 'showApplySelections'
>
-> = ['panels', 'chainingSystem', 'controlStyle', 'ignoreParentSettings'];
+> = ['panels', 'chainingSystem', 'controlStyle', 'ignoreParentSettings', 'showApplySelections'];
export type PersistableControlGroupInput = Pick<
ControlGroupInput,
typeof persistableControlGroupInputKeys[number]
diff --git a/src/plugins/controls/common/types.ts b/src/plugins/controls/common/types.ts
index 7eb0d69f98a4..ac140825563c 100644
--- a/src/plugins/controls/common/types.ts
+++ b/src/plugins/controls/common/types.ts
@@ -12,6 +12,8 @@ import { EmbeddableInput } from '@kbn/embeddable-plugin/common/types';
export type ControlWidth = 'small' | 'medium' | 'large';
export type ControlStyle = 'twoLine' | 'oneLine';
+export type TimeSlice = [number, number];
+
export interface ParentIgnoreSettings {
ignoreFilters?: boolean;
ignoreQuery?: boolean;
@@ -23,7 +25,7 @@ export type ControlInput = EmbeddableInput & {
query?: Query;
filters?: Filter[];
timeRange?: TimeRange;
- timeslice?: [number, number];
+ timeslice?: TimeSlice;
controlStyle?: ControlStyle;
ignoreParentSettings?: ParentIgnoreSettings;
};
diff --git a/src/plugins/controls/public/control_group/component/control_frame_component.tsx b/src/plugins/controls/public/control_group/component/control_frame_component.tsx
index babf862a05c9..771f6d7d9c59 100644
--- a/src/plugins/controls/public/control_group/component/control_frame_component.tsx
+++ b/src/plugins/controls/public/control_group/component/control_frame_component.tsx
@@ -19,11 +19,11 @@ import {
import { isErrorEmbeddable } from '@kbn/embeddable-plugin/public';
import { FloatingActions } from '@kbn/presentation-util-plugin/public';
+import { useChildEmbeddable } from '../../hooks/use_child_embeddable';
import {
controlGroupSelector,
useControlGroupContainer,
} from '../embeddable/control_group_container';
-import { useChildEmbeddable } from '../../hooks/use_child_embeddable';
import { ControlError } from './control_error_component';
export interface ControlFrameProps {
@@ -58,13 +58,15 @@ export const ControlFrame = ({
const usingTwoLineLayout = controlStyle === 'twoLine';
useEffect(() => {
+ let mounted = true;
if (embeddableRoot.current) {
embeddable?.render(embeddableRoot.current);
}
- const inputSubscription = embeddable
- ?.getInput$()
- .subscribe((newInput) => setTitle(newInput.title));
+ const inputSubscription = embeddable?.getInput$().subscribe((newInput) => {
+ if (mounted) setTitle(newInput.title);
+ });
return () => {
+ mounted = false;
inputSubscription?.unsubscribe();
};
}, [embeddable, embeddableRoot]);
diff --git a/src/plugins/controls/public/control_group/component/control_group_component.test.tsx b/src/plugins/controls/public/control_group/component/control_group_component.test.tsx
new file mode 100644
index 000000000000..5fee973d1033
--- /dev/null
+++ b/src/plugins/controls/public/control_group/component/control_group_component.test.tsx
@@ -0,0 +1,202 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import React from 'react';
+
+import { stubDataView } from '@kbn/data-views-plugin/common/data_view.stub';
+import { pluginServices as presentationUtilPluginServices } from '@kbn/presentation-util-plugin/public/services';
+import { registry as presentationUtilServicesRegistry } from '@kbn/presentation-util-plugin/public/services/plugin_services.story';
+import { act, render, waitFor } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+
+import { Provider } from 'react-redux';
+import { OptionsListEmbeddableFactory } from '../..';
+import { OPTIONS_LIST_CONTROL, RANGE_SLIDER_CONTROL } from '../../../common';
+import { mockControlGroupContainer, mockControlGroupInput } from '../../../common/mocks';
+import { RangeSliderEmbeddableFactory } from '../../range_slider';
+import { pluginServices } from '../../services';
+import { ControlGroupContainerContext } from '../embeddable/control_group_container';
+import { ControlGroupComponentState, ControlGroupInput } from '../types';
+import { ControlGroup } from './control_group_component';
+
+jest.mock('@dnd-kit/core', () => ({
+ /** DnD kit has a memory leak based on this layout measuring strategy on unmount; setting it to undefined prevents this */
+ ...jest.requireActual('@dnd-kit/core'),
+ LayoutMeasuringStrategy: { Always: undefined },
+}));
+
+describe('Control group component', () => {
+ interface MountOptions {
+ explicitInput?: Partial;
+ initialComponentState?: Partial;
+ }
+
+ presentationUtilServicesRegistry.start({});
+ presentationUtilPluginServices.setRegistry(presentationUtilServicesRegistry);
+
+ pluginServices.getServices().dataViews.get = jest.fn().mockResolvedValue(stubDataView);
+ pluginServices.getServices().dataViews.getIdsWithTitle = jest
+ .fn()
+ .mockResolvedValue([{ id: stubDataView.id, title: stubDataView.getIndexPattern() }]);
+ pluginServices.getServices().controls.getControlTypes = jest
+ .fn()
+ .mockReturnValue([OPTIONS_LIST_CONTROL, RANGE_SLIDER_CONTROL]);
+ pluginServices.getServices().controls.getControlFactory = jest
+ .fn()
+ .mockImplementation((type: string) => {
+ if (type === OPTIONS_LIST_CONTROL) return new OptionsListEmbeddableFactory();
+ if (type === RANGE_SLIDER_CONTROL) return new RangeSliderEmbeddableFactory();
+ });
+
+ async function mountComponent(options?: MountOptions) {
+ const controlGroupContainer = await mockControlGroupContainer(
+ mockControlGroupInput(options?.explicitInput),
+ options?.initialComponentState
+ );
+
+ const controlGroupComponent = render(
+
+
+
+
+
+ );
+
+ await waitFor(() => {
+ // wait for control group to render all 3 controls before returning
+ expect(controlGroupComponent.queryAllByTestId('control-frame').length).toBe(3);
+ });
+
+ return { controlGroupComponent, controlGroupContainer };
+ }
+
+ test('does not render end button group by default', async () => {
+ const { controlGroupComponent } = await mountComponent();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--endButtonGroup')
+ ).not.toBeInTheDocument();
+ });
+
+ test('can render **just** add control button', async () => {
+ const { controlGroupComponent } = await mountComponent({
+ initialComponentState: { showAddButton: true },
+ });
+ expect(controlGroupComponent.queryByTestId('controlGroup--endButtonGroup')).toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--addControlButton')
+ ).toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--applyFiltersButton')
+ ).not.toBeInTheDocument();
+ });
+
+ test('can render **just** apply button', async () => {
+ const { controlGroupComponent } = await mountComponent({
+ explicitInput: { showApplySelections: true },
+ });
+ expect(controlGroupComponent.queryByTestId('controlGroup--endButtonGroup')).toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--addControlButton')
+ ).not.toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--applyFiltersButton')
+ ).toBeInTheDocument();
+ });
+
+ test('can render both buttons in the end button group', async () => {
+ const { controlGroupComponent } = await mountComponent({
+ explicitInput: { showApplySelections: true },
+ initialComponentState: { showAddButton: true },
+ });
+ expect(controlGroupComponent.queryByTestId('controlGroup--endButtonGroup')).toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--addControlButton')
+ ).toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('controlGroup--applyFiltersButton')
+ ).toBeInTheDocument();
+ });
+
+ test('enables apply button based on unpublished filters', async () => {
+ const { controlGroupComponent, controlGroupContainer } = await mountComponent({
+ explicitInput: { showApplySelections: true },
+ });
+ expect(controlGroupComponent.getByTestId('controlGroup--applyFiltersButton')).toBeDisabled();
+
+ act(() => controlGroupContainer.dispatch.setUnpublishedFilters({ filters: [] }));
+ expect(controlGroupComponent.getByTestId('controlGroup--applyFiltersButton')).toBeEnabled();
+
+ act(() => controlGroupContainer.dispatch.setUnpublishedFilters(undefined));
+ expect(controlGroupComponent.getByTestId('controlGroup--applyFiltersButton')).toBeDisabled();
+
+ act(() => controlGroupContainer.dispatch.setUnpublishedFilters({ timeslice: [0, 1] }));
+ expect(controlGroupComponent.getByTestId('controlGroup--applyFiltersButton')).toBeEnabled();
+ });
+
+ test('calls publish when apply button is clicked', async () => {
+ const { controlGroupComponent, controlGroupContainer } = await mountComponent({
+ explicitInput: { showApplySelections: true },
+ });
+ let applyButton = controlGroupComponent.getByTestId('controlGroup--applyFiltersButton');
+ expect(applyButton).toBeDisabled();
+ controlGroupContainer.publishFilters = jest.fn();
+
+ const unpublishedFilters: ControlGroupComponentState['unpublishedFilters'] = {
+ filters: [
+ {
+ query: { exists: { field: 'foo' } },
+ meta: { type: 'exists' },
+ },
+ ],
+ timeslice: [0, 1],
+ };
+ act(() => controlGroupContainer.dispatch.setUnpublishedFilters(unpublishedFilters));
+ applyButton = controlGroupComponent.getByTestId('controlGroup--applyFiltersButton');
+ expect(applyButton).toBeEnabled();
+
+ userEvent.click(applyButton);
+ expect(controlGroupContainer.publishFilters).toBeCalledWith(unpublishedFilters);
+ });
+
+ test('ensure actions get rendered', async () => {
+ presentationUtilPluginServices.getServices().uiActions.getTriggerCompatibleActions = jest
+ .fn()
+ .mockImplementation(() => {
+ return [
+ {
+ isCompatible: jest.fn().mockResolvedValue(true),
+ id: 'testAction',
+ MenuItem: () => test1
,
+ },
+
+ {
+ isCompatible: jest.fn().mockResolvedValue(true),
+ id: 'testAction2',
+ MenuItem: () => test2
,
+ },
+ ];
+ });
+
+ const { controlGroupComponent } = await mountComponent();
+ expect(
+ controlGroupComponent.queryByTestId('presentationUtil__floatingActions__control1')
+ ).toBeInTheDocument();
+ expect(
+ controlGroupComponent.queryByTestId('presentationUtil__floatingActions__control2')
+ ).toBeInTheDocument();
+ });
+});
diff --git a/src/plugins/controls/public/control_group/component/control_group_component.tsx b/src/plugins/controls/public/control_group/component/control_group_component.tsx
index 20d599aed0eb..ebbcf20b6636 100644
--- a/src/plugins/controls/public/control_group/component/control_group_component.tsx
+++ b/src/plugins/controls/public/control_group/component/control_group_component.tsx
@@ -10,7 +10,6 @@ import '../control_group.scss';
import classNames from 'classnames';
import React, { useEffect, useMemo, useState } from 'react';
-import { TypedUseSelectorHook, useSelector } from 'react-redux';
import {
closestCenter,
@@ -38,28 +37,36 @@ import {
EuiIcon,
EuiPanel,
EuiText,
+ EuiToolTip,
EuiTourStep,
} from '@elastic/eui';
import { ViewMode } from '@kbn/embeddable-plugin/public';
import { ControlGroupStrings } from '../control_group_strings';
-import { useControlGroupContainer } from '../embeddable/control_group_container';
-import { ControlGroupReduxState } from '../types';
+import {
+ controlGroupSelector,
+ useControlGroupContainer,
+} from '../embeddable/control_group_container';
import { ControlClone, SortableControl } from './control_group_sortable_item';
-const contextSelect = useSelector as TypedUseSelectorHook;
-
export const ControlGroup = () => {
const controlGroup = useControlGroupContainer();
// current state
- const panels = contextSelect((state) => state.explicitInput.panels);
- const viewMode = contextSelect((state) => state.explicitInput.viewMode);
- const controlStyle = contextSelect((state) => state.explicitInput.controlStyle);
- const showAddButton = contextSelect((state) => state.componentState.showAddButton);
- const controlWithInvalidSelectionsId = contextSelect(
+ const panels = controlGroupSelector((state) => state.explicitInput.panels);
+ const viewMode = controlGroupSelector((state) => state.explicitInput.viewMode);
+ const controlStyle = controlGroupSelector((state) => state.explicitInput.controlStyle);
+ const showApplySelections = controlGroupSelector(
+ (state) => state.explicitInput.showApplySelections
+ );
+ const showAddButton = controlGroupSelector((state) => state.componentState.showAddButton);
+ const unpublishedFilters = controlGroupSelector(
+ (state) => state.componentState.unpublishedFilters
+ );
+ const controlWithInvalidSelectionsId = controlGroupSelector(
(state) => state.componentState.controlWithInvalidSelectionsId
);
+
const [tourStepOpen, setTourStepOpen] = useState(true);
const [suppressTourChecked, setSuppressTourChecked] = useState(false);
const [renderTourStep, setRenderTourStep] = useState(false);
@@ -82,10 +89,49 @@ export const ControlGroup = () => {
* This forces the tour step to get unmounted so that it can attach to the new invalid
* control - otherwise, the anchor will remain attached to the old invalid control
*/
+ let mounted = true;
setRenderTourStep(false);
- setTimeout(() => setRenderTourStep(true), 100);
+ setTimeout(() => {
+ if (mounted) {
+ setRenderTourStep(true);
+ }
+ }, 100);
+ return () => {
+ mounted = false;
+ };
}, [controlWithInvalidSelectionsId]);
+ const applyButtonEnabled = useMemo(() => {
+ /**
+ * this is undefined if there are no unpublished filters / timeslice; note that an empty filter array counts
+ * as unpublished filters and so the apply button should still be enabled in this case
+ */
+ return Boolean(unpublishedFilters);
+ }, [unpublishedFilters]);
+
+ const showAppendedButtonGroup = useMemo(
+ () => showAddButton || showApplySelections,
+ [showAddButton, showApplySelections]
+ );
+
+ const ApplyButtonComponent = useMemo(() => {
+ return (
+ {
+ if (unpublishedFilters) controlGroup.publishFilters(unpublishedFilters);
+ }}
+ />
+ );
+ }, [applyButtonEnabled, unpublishedFilters, controlGroup]);
+
const tourStep = useMemo(() => {
if (
!renderTourStep ||
@@ -208,10 +254,11 @@ export const ControlGroup = () => {
>
{tourStep}
@@ -254,16 +301,42 @@ export const ControlGroup = () => {
- {showAddButton && (
-
- controlGroup.openAddDataControlFlyout()}
- />
+ {showAppendedButtonGroup && (
+
+
+ {showAddButton && (
+
+
+ controlGroup.openAddDataControlFlyout()}
+ />
+
+
+ )}
+ {showApplySelections && (
+
+ {applyButtonEnabled ? (
+ ApplyButtonComponent
+ ) : (
+
+ {ApplyButtonComponent}
+
+ )}
+
+ )}
+
)}
diff --git a/src/plugins/controls/public/control_group/control_group.scss b/src/plugins/controls/public/control_group/control_group.scss
index 4ad7753a9cb5..bfc1b79bac2b 100644
--- a/src/plugins/controls/public/control_group/control_group.scss
+++ b/src/plugins/controls/public/control_group/control_group.scss
@@ -3,8 +3,14 @@ $mediumControl: $euiSize * 25;
$largeControl: $euiSize * 50;
$controlMinWidth: $euiSize * 14;
-.controlGroup {
+.controlsWrapper {
+ display: flex;
+ align-items: center;
min-height: $euiSize * 4;
+
+ .controlGroup--endButtonGroup {
+ align-self: end;
+ }
}
.controlsWrapper--twoLine {
diff --git a/src/plugins/controls/public/control_group/control_group_strings.ts b/src/plugins/controls/public/control_group/control_group_strings.ts
index 7b1b3ff3c116..8a2d74c84292 100644
--- a/src/plugins/controls/public/control_group/control_group_strings.ts
+++ b/src/plugins/controls/public/control_group/control_group_strings.ts
@@ -172,6 +172,14 @@ export const ControlGroupStrings = {
i18n.translate('controls.controlGroup.management.addControl', {
defaultMessage: 'Add control',
}),
+ getApplyButtonTitle: (applyResetButtonsEnabled: boolean) =>
+ applyResetButtonsEnabled
+ ? i18n.translate('controls.controlGroup.management.applyButtonTooltip.enabled', {
+ defaultMessage: 'Apply selections',
+ })
+ : i18n.translate('controls.controlGroup.management.applyButtonTooltip.disabled', {
+ defaultMessage: 'No new selections to apply',
+ }),
getFlyoutTitle: () =>
i18n.translate('controls.controlGroup.management.flyoutTitle', {
defaultMessage: 'Control settings',
@@ -292,8 +300,8 @@ export const ControlGroupStrings = {
i18n.translate('controls.controlGroup.management.validate.title', {
defaultMessage: 'Validate user selections',
}),
- getValidateSelectionsSubTitle: () =>
- i18n.translate('controls.controlGroup.management.validate.subtitle', {
+ getValidateSelectionsTooltip: () =>
+ i18n.translate('controls.controlGroup.management.validate.tooltip', {
defaultMessage: 'Highlight control selections that result in no data.',
}),
},
@@ -302,12 +310,23 @@ export const ControlGroupStrings = {
i18n.translate('controls.controlGroup.management.hierarchy.title', {
defaultMessage: 'Chain controls',
}),
- getHierarchySubTitle: () =>
- i18n.translate('controls.controlGroup.management.hierarchy.subtitle', {
+ getHierarchyTooltip: () =>
+ i18n.translate('controls.controlGroup.management.hierarchy.tooltip', {
defaultMessage:
'Selections in one control narrow down available options in the next. Controls are chained from left to right.',
}),
},
+ showApplySelections: {
+ getShowApplySelectionsTitle: () =>
+ i18n.translate('controls.controlGroup.management.showApplySelections.title', {
+ defaultMessage: 'Apply selections automatically',
+ }),
+ getShowApplySelectionsTooltip: () =>
+ i18n.translate('controls.controlGroup.management.showApplySelections.tooltip', {
+ defaultMessage:
+ 'If disabled, control selections will only be applied after clicking apply.',
+ }),
+ },
},
filteringSettings: {
getFilteringSettingsTitle: () =>
diff --git a/src/plugins/controls/public/control_group/editor/control_group_editor.tsx b/src/plugins/controls/public/control_group/editor/control_group_editor.tsx
index 70abc8ee86e7..aad2ca51bc57 100644
--- a/src/plugins/controls/public/control_group/editor/control_group_editor.tsx
+++ b/src/plugins/controls/public/control_group/editor/control_group_editor.tsx
@@ -50,8 +50,6 @@ interface EditControlGroupProps {
onClose: () => void;
}
-type EditorControlGroupInput = ControlGroupInput;
-
const editorControlGroupInputIsEqual = (a: ControlGroupInput, b: ControlGroupInput) =>
fastIsEqual(a, b);
@@ -62,7 +60,7 @@ export const ControlGroupEditor = ({
onDeleteAll,
onClose,
}: EditControlGroupProps) => {
- const [controlGroupEditorState, setControlGroupEditorState] = useState({
+ const [controlGroupEditorState, setControlGroupEditorState] = useState({
...getDefaultControlGroupInput(),
...initialInput,
});
@@ -92,7 +90,9 @@ export const ControlGroupEditor = ({
const applyChangesToInput = useCallback(() => {
const inputToApply = { ...controlGroupEditorState };
- if (!editorControlGroupInputIsEqual(inputToApply, initialInput)) updateInput(inputToApply);
+ if (!editorControlGroupInputIsEqual(inputToApply, initialInput)) {
+ updateInput(inputToApply);
+ }
}, [controlGroupEditorState, initialInput, updateInput]);
return (
@@ -160,7 +160,7 @@ export const ControlGroupEditor = ({
label={
}
checked={!Boolean(controlGroupEditorState.ignoreParentSettings?.ignoreValidations)}
@@ -173,7 +173,7 @@ export const ControlGroupEditor = ({
label={
}
checked={controlGroupEditorState.chainingSystem === 'HIERARCHICAL'}
@@ -183,6 +183,23 @@ export const ControlGroupEditor = ({
})
}
/>
+
+
+ }
+ checked={!controlGroupEditorState.showApplySelections}
+ onChange={(e) =>
+ updateControlGroupEditorSetting({
+ showApplySelections: !e.target.checked,
+ })
+ }
+ />
diff --git a/src/plugins/controls/public/control_group/embeddable/control_group_chaining_system.ts b/src/plugins/controls/public/control_group/embeddable/control_group_chaining_system.ts
index 1857bd8a8df0..093d52a28bb7 100644
--- a/src/plugins/controls/public/control_group/embeddable/control_group_chaining_system.ts
+++ b/src/plugins/controls/public/control_group/embeddable/control_group_chaining_system.ts
@@ -18,6 +18,7 @@ import {
ControlGroupInput,
ControlsPanels,
} from '../../../common/control_group/types';
+import { TimeSlice } from '../../../common/types';
interface GetPrecedingFiltersProps {
id: string;
@@ -38,7 +39,7 @@ interface ChainingSystem {
) => EmbeddableContainerSettings | undefined;
getPrecedingFilters: (
props: GetPrecedingFiltersProps
- ) => { filters: Filter[]; timeslice?: [number, number] } | undefined;
+ ) => { filters: Filter[]; timeslice?: TimeSlice } | undefined;
onChildChange: (props: OnChildChangedProps) => void;
}
diff --git a/src/plugins/controls/public/control_group/embeddable/control_group_container.tsx b/src/plugins/controls/public/control_group/embeddable/control_group_container.tsx
index 0663d3a3d9c6..4d1ecc6458ce 100644
--- a/src/plugins/controls/public/control_group/embeddable/control_group_container.tsx
+++ b/src/plugins/controls/public/control_group/embeddable/control_group_container.tsx
@@ -10,9 +10,9 @@ import { compareFilters, COMPARE_ALL_OPTIONS, Filter, uniqFilters } from '@kbn/e
import { isEqual, pick } from 'lodash';
import React, { createContext, useContext } from 'react';
import ReactDOM from 'react-dom';
-import { Provider, TypedUseSelectorHook, useSelector } from 'react-redux';
+import { batch, Provider, TypedUseSelectorHook, useSelector } from 'react-redux';
import { BehaviorSubject, merge, Subject, Subscription } from 'rxjs';
-import { debounceTime, distinctUntilChanged, skip } from 'rxjs/operators';
+import { debounceTime, distinctUntilChanged, filter, first, skip } from 'rxjs/operators';
import { OverlayRef } from '@kbn/core/public';
import { Container, EmbeddableFactory } from '@kbn/embeddable-plugin/public';
@@ -24,6 +24,7 @@ import {
persistableControlGroupInputIsEqual,
persistableControlGroupInputKeys,
} from '../../../common';
+import { TimeSlice } from '../../../common/types';
import { pluginServices } from '../../services';
import { ControlsStorageService } from '../../services/storage/types';
import { ControlEmbeddable, ControlInput, ControlOutput } from '../../types';
@@ -43,6 +44,7 @@ import { startDiffingControlGroupState } from '../state/control_group_diffing_in
import { controlGroupReducers } from '../state/control_group_reducers';
import {
ControlGroupComponentState,
+ ControlGroupFilterOutput,
ControlGroupInput,
ControlGroupOutput,
ControlGroupReduxState,
@@ -168,8 +170,9 @@ export class ControlGroupContainer extends Container<
// when all children are ready setup subscriptions
this.untilAllChildrenReady().then(() => {
this.recalculateDataViews();
- this.recalculateFilters();
this.setupSubscriptions();
+ const { filters, timeslice } = this.recalculateFilters();
+ this.publishFilters({ filters, timeslice });
this.initialized$.next(true);
});
@@ -203,6 +206,29 @@ export class ControlGroupContainer extends Container<
};
private setupSubscriptions = () => {
+ /**
+ * on initialization, in order for comparison to be performed, calculate the last saved filters based on the
+ * selections from the last saved input and save them to component state. This is done as a subscription so that
+ * it can be done async without actually slowing down the loading of the controls.
+ */
+ this.subscriptions.add(
+ this.initialized$
+ .pipe(
+ filter((isInitialized) => isInitialized),
+ first()
+ )
+ .subscribe(async () => {
+ const {
+ componentState: { lastSavedInput },
+ explicitInput: { panels },
+ } = this.getState();
+ const filterOutput = await this.calculateFiltersFromSelections(
+ lastSavedInput?.panels ?? panels
+ );
+ this.dispatch.setLastSavedFilters(filterOutput);
+ })
+ );
+
/**
* refresh control order cache and make all panels refreshInputFromParent whenever panel orders change
*/
@@ -214,12 +240,29 @@ export class ControlGroupContainer extends Container<
)
.subscribe((input) => {
this.recalculateDataViews();
- this.recalculateFilters();
+ this.recalculateFilters$.next(null);
const childOrderCache = cachedChildEmbeddableOrder(input.panels);
childOrderCache.idsInOrder.forEach((id) => this.getChild(id)?.refreshInputFromParent());
})
);
+ /**
+ * force publish filters when `showApplySelections` value changes to keep state clean
+ */
+ this.subscriptions.add(
+ this.getInput$()
+ .pipe(
+ skip(1),
+ distinctUntilChanged(
+ (a, b) => Boolean(a.showApplySelections) === Boolean(b.showApplySelections)
+ )
+ )
+ .subscribe(() => {
+ const { filters, timeslice } = this.recalculateFilters();
+ this.publishFilters({ filters, timeslice });
+ })
+ );
+
/**
* run OnChildOutputChanged when any child's output has changed
*/
@@ -240,17 +283,37 @@ export class ControlGroupContainer extends Container<
*/
this.subscriptions.add(
this.recalculateFilters$.pipe(debounceTime(10)).subscribe(() => {
- this.recalculateFilters();
+ const { filters, timeslice } = this.recalculateFilters();
+ this.tryPublishFilters({ filters, timeslice });
})
);
};
+ public setSavedState(lastSavedInput: PersistableControlGroupInput): void {
+ batch(() => {
+ this.dispatch.setLastSavedInput(lastSavedInput);
+ const { filters, timeslice } = this.getState().output;
+ this.dispatch.setLastSavedFilters({ filters, timeslice });
+ });
+ }
+
public resetToLastSavedState() {
const {
+ explicitInput: { showApplySelections: currentShowApplySelections },
componentState: { lastSavedInput },
} = this.getState();
- if (!persistableControlGroupInputIsEqual(this.getPersistableInput(), lastSavedInput)) {
+
+ if (
+ lastSavedInput &&
+ !persistableControlGroupInputIsEqual(this.getPersistableInput(), lastSavedInput)
+ ) {
this.updateInput(lastSavedInput);
+ if (currentShowApplySelections || lastSavedInput.showApplySelections) {
+ /** If either the current or past state has auto-apply off, calling reset should force the changes to be published */
+ this.calculateFiltersFromSelections(lastSavedInput.panels).then((filterOutput) => {
+ this.publishFilters(filterOutput);
+ });
+ }
this.reload(); // this forces the children to update their inputs + perform validation as necessary
}
}
@@ -271,7 +334,8 @@ export class ControlGroupContainer extends Container<
this.updateInput(newInput);
this.untilAllChildrenReady().then(() => {
this.recalculateDataViews();
- this.recalculateFilters();
+ const { filters, timeslice } = this.recalculateFilters();
+ this.publishFilters({ filters, timeslice });
this.setupSubscriptions();
this.initialized$.next(true);
});
@@ -326,7 +390,7 @@ export class ControlGroupContainer extends Container<
this.updateInput({ filters });
};
- private recalculateFilters = () => {
+ private recalculateFilters = (): ControlGroupFilterOutput => {
const allFilters: Filter[] = [];
let timeslice;
Object.values(this.children).map((child: ControlEmbeddable) => {
@@ -336,17 +400,71 @@ export class ControlGroupContainer extends Container<
timeslice = childOutput.timeslice;
}
});
+ return { filters: uniqFilters(allFilters), timeslice };
+ };
- // if filters are different, publish them
+ private async calculateFiltersFromSelections(
+ panels: PersistableControlGroupInput['panels']
+ ): Promise {
+ let filtersArray: Filter[] = [];
+ let timeslice;
+ await Promise.all(
+ Object.values(this.children).map(async (child) => {
+ if (panels[child.id]) {
+ const controlOutput =
+ (await (child as ControlEmbeddable).selectionsToFilters?.(
+ panels[child.id].explicitInput
+ )) ?? ({} as ControlGroupFilterOutput);
+ if (controlOutput.filters) {
+ filtersArray = [...filtersArray, ...controlOutput.filters];
+ } else if (controlOutput.timeslice) {
+ timeslice = controlOutput.timeslice;
+ }
+ }
+ })
+ );
+ return { filters: filtersArray, timeslice };
+ }
+
+ /**
+ * If apply button is enabled, add the new filters to the unpublished filters component state;
+ * otherwise, publish new filters right away
+ */
+ private tryPublishFilters = ({
+ filters,
+ timeslice,
+ }: {
+ filters?: Filter[];
+ timeslice?: TimeSlice;
+ }) => {
+ // if filters are different, try publishing them
if (
- !compareFilters(this.output.filters ?? [], allFilters ?? [], COMPARE_ALL_OPTIONS) ||
+ !compareFilters(this.output.filters ?? [], filters ?? [], COMPARE_ALL_OPTIONS) ||
!isEqual(this.output.timeslice, timeslice)
) {
- this.updateOutput({ filters: uniqFilters(allFilters), timeslice });
- this.onFiltersPublished$.next(allFilters);
+ const {
+ explicitInput: { showApplySelections },
+ } = this.getState();
+
+ if (!showApplySelections) {
+ this.publishFilters({ filters, timeslice });
+ } else {
+ this.dispatch.setUnpublishedFilters({ filters, timeslice });
+ }
+ } else {
+ this.dispatch.setUnpublishedFilters(undefined);
}
};
+ public publishFilters = ({ filters, timeslice }: ControlGroupFilterOutput) => {
+ this.updateOutput({
+ filters,
+ timeslice,
+ });
+ this.dispatch.setUnpublishedFilters(undefined);
+ this.onFiltersPublished$.next(filters ?? []);
+ };
+
private recalculateDataViews = () => {
const allDataViewIds: Set = new Set();
Object.values(this.children).map((child) => {
diff --git a/src/plugins/controls/public/control_group/state/control_group_diffing_integration.ts b/src/plugins/controls/public/control_group/state/control_group_diffing_integration.ts
index 23f20ff885bc..f85dcd21bdce 100644
--- a/src/plugins/controls/public/control_group/state/control_group_diffing_integration.ts
+++ b/src/plugins/controls/public/control_group/state/control_group_diffing_integration.ts
@@ -6,9 +6,11 @@
* Side Public License, v 1.
*/
+import { isEqual } from 'lodash';
import { AnyAction, Middleware } from 'redux';
import { debounceTime, Observable, startWith, Subject, switchMap } from 'rxjs';
+import { compareFilters, COMPARE_ALL_OPTIONS } from '@kbn/es-query';
import { ControlGroupContainer } from '..';
import { persistableControlGroupInputIsEqual } from '../../../common';
import { CHANGE_CHECK_DEBOUNCE } from '../../constants';
@@ -41,12 +43,20 @@ export function startDiffingControlGroupState(this: ControlGroupContainer) {
const {
explicitInput: currentInput,
- componentState: { lastSavedInput },
+ componentState: { lastSavedInput, lastSavedFilters },
+ output: { filters, timeslice },
} = this.getState();
- const hasUnsavedChanges = !persistableControlGroupInputIsEqual(
- currentInput,
- lastSavedInput
+
+ const hasUnsavedChanges = !(
+ persistableControlGroupInputIsEqual(
+ currentInput,
+ lastSavedInput,
+ false // never diff selections for unsaved changes - compare the output filters instead
+ ) &&
+ compareFilters(filters ?? [], lastSavedFilters?.filters ?? [], COMPARE_ALL_OPTIONS) &&
+ isEqual(timeslice, lastSavedFilters?.timeslice)
);
+
this.unsavedChanges.next(hasUnsavedChanges ? this.getPersistableInput() : undefined);
});
})
diff --git a/src/plugins/controls/public/control_group/state/control_group_reducers.ts b/src/plugins/controls/public/control_group/state/control_group_reducers.ts
index 313b21af5745..8be7c9ce0383 100644
--- a/src/plugins/controls/public/control_group/state/control_group_reducers.ts
+++ b/src/plugins/controls/public/control_group/state/control_group_reducers.ts
@@ -13,17 +13,29 @@ import { ControlWidth } from '../../types';
import { ControlGroupComponentState, ControlGroupInput, ControlGroupReduxState } from '../types';
export const controlGroupReducers = {
+ setControlWithInvalidSelectionsId: (
+ state: WritableDraft,
+ action: PayloadAction
+ ) => {
+ state.componentState.controlWithInvalidSelectionsId = action.payload;
+ },
setLastSavedInput: (
state: WritableDraft,
action: PayloadAction
) => {
state.componentState.lastSavedInput = action.payload;
},
- setControlWithInvalidSelectionsId: (
+ setLastSavedFilters: (
state: WritableDraft,
- action: PayloadAction
+ action: PayloadAction
) => {
- state.componentState.controlWithInvalidSelectionsId = action.payload;
+ state.componentState.lastSavedFilters = action.payload;
+ },
+ setUnpublishedFilters: (
+ state: WritableDraft,
+ action: PayloadAction
+ ) => {
+ state.componentState.unpublishedFilters = action.payload;
},
setControlStyle: (
state: WritableDraft,
diff --git a/src/plugins/controls/public/control_group/types.ts b/src/plugins/controls/public/control_group/types.ts
index c48aee3f1ace..76b2e1f4d84a 100644
--- a/src/plugins/controls/public/control_group/types.ts
+++ b/src/plugins/controls/public/control_group/types.ts
@@ -8,12 +8,23 @@
import { DataViewField } from '@kbn/data-views-plugin/common';
import { ContainerOutput } from '@kbn/embeddable-plugin/public';
+import { Filter } from '@kbn/es-query';
import { ReduxEmbeddableState } from '@kbn/presentation-util-plugin/public';
+
import { ControlGroupInput, PersistableControlGroupInput } from '../../common/control_group/types';
-import { CommonControlOutput } from '../types';
+import { TimeSlice } from '../../common/types';
+
+export interface ControlFilterOutput {
+ filters?: Filter[];
+}
+export interface ControlTimesliceOutput {
+ timeslice?: TimeSlice;
+}
+
+export type ControlGroupFilterOutput = ControlFilterOutput & ControlTimesliceOutput;
export type ControlGroupOutput = ContainerOutput &
- Omit & { dataViewIds: string[] };
+ ControlGroupFilterOutput & { dataViewIds: string[] };
// public only - redux embeddable state type
export type ControlGroupReduxState = ReduxEmbeddableState<
@@ -41,7 +52,9 @@ export interface ControlGroupSettings {
}
export type ControlGroupComponentState = ControlGroupSettings & {
- lastSavedInput: PersistableControlGroupInput;
+ lastSavedInput?: PersistableControlGroupInput;
+ lastSavedFilters?: ControlGroupFilterOutput;
+ unpublishedFilters?: ControlGroupFilterOutput;
controlWithInvalidSelectionsId?: string;
};
diff --git a/src/plugins/controls/public/options_list/components/options_list_popover_footer.tsx b/src/plugins/controls/public/options_list/components/options_list_popover_footer.tsx
index 9eef78edde7d..28ed16a3f4f0 100644
--- a/src/plugins/controls/public/options_list/components/options_list_popover_footer.tsx
+++ b/src/plugins/controls/public/options_list/components/options_list_popover_footer.tsx
@@ -26,10 +26,12 @@ import { useOptionsList } from '../embeddable/options_list_embeddable';
const aggregationToggleButtons = [
{
id: 'optionsList__includeResults',
+ key: 'optionsList__includeResults',
label: OptionsListStrings.popover.getIncludeLabel(),
},
{
id: 'optionsList__excludeResults',
+ key: 'optionsList__excludeResults',
label: OptionsListStrings.popover.getExcludeLabel(),
},
];
diff --git a/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.test.tsx b/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.test.tsx
index d3c5bb4736e4..00d9ec69687d 100644
--- a/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.test.tsx
+++ b/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.test.tsx
@@ -6,15 +6,13 @@
* Side Public License, v 1.
*/
-import { ControlGroupInput } from '../../../common';
-import { lazyLoadReduxToolsPackage } from '@kbn/presentation-util-plugin/public';
import { storybookFlightsDataView } from '@kbn/presentation-util-plugin/public/mocks';
-import { OPTIONS_LIST_CONTROL } from '../../../common';
-import { ControlGroupContainer } from '../../control_group/embeddable/control_group_container';
+import { ControlGroupInput, OPTIONS_LIST_CONTROL } from '../../../common';
+import { mockControlGroupContainer } from '../../../common/mocks';
import { pluginServices } from '../../services';
import { injectStorybookDataView } from '../../services/data_views/data_views.story';
-import { OptionsListEmbeddableFactory } from './options_list_embeddable_factory';
import { OptionsListEmbeddable } from './options_list_embeddable';
+import { OptionsListEmbeddableFactory } from './options_list_embeddable_factory';
pluginServices.getServices().controls.getControlFactory = jest
.fn()
@@ -25,9 +23,8 @@ pluginServices.getServices().controls.getControlFactory = jest
describe('initialize', () => {
describe('without selected options', () => {
test('should notify control group when initialization is finished', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
// data view not required for test case
// setInitializationFinished is called before fetching options when value is not provided
@@ -45,9 +42,8 @@ describe('initialize', () => {
describe('with selected options', () => {
test('should set error message when data view can not be found', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(undefined);
@@ -68,9 +64,8 @@ describe('initialize', () => {
});
test('should set error message when field can not be found', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
@@ -89,9 +84,8 @@ describe('initialize', () => {
});
test('should notify control group when initialization is finished', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
diff --git a/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx b/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx
index ea3d4d80399c..506530edc185 100644
--- a/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx
+++ b/src/plugins/controls/public/options_list/embeddable/options_list_embeddable.tsx
@@ -35,6 +35,7 @@ import {
OptionsListEmbeddableInput,
OPTIONS_LIST_CONTROL,
} from '../..';
+import { ControlFilterOutput } from '../../control_group/types';
import { pluginServices } from '../../services';
import { ControlsDataViewsService } from '../../services/data_views/types';
import { ControlsOptionsListService } from '../../services/options_list/types';
@@ -145,7 +146,14 @@ export class OptionsListEmbeddable
private initialize = async () => {
const { selectedOptions: initialSelectedOptions } = this.getInput();
if (initialSelectedOptions) {
- const filters = await this.buildFilter();
+ const {
+ explicitInput: { existsSelected, exclude },
+ } = this.getState();
+ const { filters } = await this.selectionsToFilters({
+ existsSelected,
+ exclude,
+ selectedOptions: initialSelectedOptions,
+ });
this.dispatch.publishFilters(filters);
}
this.setInitializationFinished();
@@ -231,7 +239,7 @@ export class OptionsListEmbeddable
}
}),
switchMap(async () => {
- const newFilters = await this.buildFilter();
+ const { filters: newFilters } = await this.buildFilter();
this.dispatch.publishFilters(newFilters);
})
)
@@ -389,15 +397,17 @@ export class OptionsListEmbeddable
});
};
- private buildFilter = async () => {
- const { existsSelected, selectedOptions } = this.getState().explicitInput ?? {};
- const { exclude } = this.getInput();
+ public selectionsToFilters = async (
+ input: Partial
+ ): Promise => {
+ const { existsSelected, exclude, selectedOptions } = input;
if ((!selectedOptions || isEmpty(selectedOptions)) && !existsSelected) {
- return [];
+ return { filters: [] };
}
+
const { dataView, field } = await this.getCurrentDataViewAndField();
- if (!dataView || !field) return;
+ if (!dataView || !field) return { filters: [] };
let newFilter: Filter | undefined;
if (existsSelected) {
@@ -410,11 +420,23 @@ export class OptionsListEmbeddable
}
}
- if (!newFilter) return [];
-
+ if (!newFilter) return { filters: [] };
newFilter.meta.key = field?.name;
if (exclude) newFilter.meta.negate = true;
- return [newFilter];
+ return { filters: [newFilter] };
+ };
+
+ private buildFilter = async (): Promise => {
+ const {
+ componentState: { validSelections },
+ explicitInput: { existsSelected, exclude },
+ } = this.getState();
+
+ return await this.selectionsToFilters({
+ existsSelected,
+ exclude,
+ selectedOptions: validSelections,
+ });
};
public clearSelections() {
diff --git a/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.test.tsx b/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.test.tsx
index 6a07cd531f8e..9454e5ad3617 100644
--- a/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.test.tsx
+++ b/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.test.tsx
@@ -6,16 +6,14 @@
* Side Public License, v 1.
*/
-import { of } from 'rxjs';
-import { ControlGroupInput } from '../../../common';
-import { lazyLoadReduxToolsPackage } from '@kbn/presentation-util-plugin/public';
import { storybookFlightsDataView } from '@kbn/presentation-util-plugin/public/mocks';
-import { RANGE_SLIDER_CONTROL } from '../../../common';
-import { ControlGroupContainer } from '../../control_group/embeddable/control_group_container';
+import { of } from 'rxjs';
+import { ControlGroupInput, RANGE_SLIDER_CONTROL } from '../../../common';
+import { mockControlGroupContainer } from '../../../common/mocks';
import { pluginServices } from '../../services';
import { injectStorybookDataView } from '../../services/data_views/data_views.story';
-import { RangeSliderEmbeddableFactory } from './range_slider_embeddable_factory';
import { RangeSliderEmbeddable } from './range_slider_embeddable';
+import { RangeSliderEmbeddableFactory } from './range_slider_embeddable_factory';
let totalResults = 20;
beforeEach(() => {
@@ -51,9 +49,8 @@ beforeEach(() => {
describe('initialize', () => {
describe('without selected range', () => {
test('should notify control group when initialization is finished', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
// data view not required for test case
// setInitializationFinished is called before fetching slider range when value is not provided
@@ -71,9 +68,8 @@ describe('initialize', () => {
describe('with selected range', () => {
test('should set error message when data view can not be found', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(undefined);
@@ -94,9 +90,8 @@ describe('initialize', () => {
});
test('should set error message when field can not be found', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
@@ -115,9 +110,8 @@ describe('initialize', () => {
});
test('should set invalid state when filter returns zero results', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
totalResults = 0;
@@ -137,9 +131,8 @@ describe('initialize', () => {
});
test('should set range and filter', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
@@ -168,9 +161,8 @@ describe('initialize', () => {
});
test('should notify control group when initialization is finished', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
@@ -185,9 +177,8 @@ describe('initialize', () => {
});
test('should notify control group when initialization throws', async () => {
- const reduxEmbeddablePackage = await lazyLoadReduxToolsPackage();
const controlGroupInput = { chainingSystem: 'NONE', panels: {} } as ControlGroupInput;
- const container = new ControlGroupContainer(reduxEmbeddablePackage, controlGroupInput);
+ const container = await mockControlGroupContainer(controlGroupInput);
injectStorybookDataView(storybookFlightsDataView);
diff --git a/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx b/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx
index 6efc6e9fc1a6..368fca384742 100644
--- a/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx
+++ b/src/plugins/controls/public/range_slider/embeddable/range_slider_embeddable.tsx
@@ -34,6 +34,7 @@ import {
RangeSliderEmbeddableInput,
RANGE_SLIDER_CONTROL,
} from '../..';
+import { ControlFilterOutput } from '../../control_group/types';
import { pluginServices } from '../../services';
import { ControlsDataService } from '../../services/data/types';
import { ControlsDataViewsService } from '../../services/data_views/types';
@@ -135,8 +136,8 @@ export class RangeSliderEmbeddable
private initialize = async () => {
const [initialMin, initialMax] = this.getInput().value ?? [];
if (!isEmpty(initialMin) || !isEmpty(initialMax)) {
- const filter = await this.buildFilter();
- this.dispatch.publishFilters(filter);
+ const { filters: rangeFilter } = await this.buildFilter();
+ this.dispatch.publishFilters(rangeFilter);
}
this.setInitializationFinished();
@@ -190,7 +191,7 @@ export class RangeSliderEmbeddable
switchMap(async () => {
try {
this.dispatch.setLoading(true);
- const rangeFilter = await this.buildFilter();
+ const { filters: rangeFilter } = await this.buildFilter();
this.dispatch.publishFilters(rangeFilter);
await this.runValidations();
this.dispatch.setLoading(false);
@@ -300,25 +301,22 @@ export class RangeSliderEmbeddable
return { min, max };
};
- private buildFilter = async () => {
- const {
- explicitInput: { value },
- } = this.getState();
-
+ public selectionsToFilters = async (
+ input: Partial
+ ): Promise => {
+ const { value } = input;
const [selectedMin, selectedMax] = value ?? ['', ''];
const [min, max] = [selectedMin, selectedMax].map(parseFloat);
const { dataView, field } = await this.getCurrentDataViewAndField();
- if (!dataView || !field) return [];
-
- if (isEmpty(selectedMin) && isEmpty(selectedMax)) return [];
+ if (!dataView || !field || (isEmpty(selectedMin) && isEmpty(selectedMax))) {
+ return { filters: [] };
+ }
const params = {} as RangeFilterParams;
-
if (selectedMin) {
params.gte = min;
}
-
if (selectedMax) {
params.lte = max;
}
@@ -328,7 +326,14 @@ export class RangeSliderEmbeddable
rangeFilter.meta.type = 'range';
rangeFilter.meta.params = params;
- return [rangeFilter];
+ return { filters: [rangeFilter] };
+ };
+
+ private buildFilter = async () => {
+ const {
+ explicitInput: { value },
+ } = this.getState();
+ return await this.selectionsToFilters({ value });
};
private onLoadingError(errorMessage: string) {
diff --git a/src/plugins/controls/public/time_slider/components/index.scss b/src/plugins/controls/public/time_slider/components/index.scss
index c23667f314f0..794b27bddc05 100644
--- a/src/plugins/controls/public/time_slider/components/index.scss
+++ b/src/plugins/controls/public/time_slider/components/index.scss
@@ -4,7 +4,7 @@
max-inline-size: 100% !important;
}
-.timeSlider-playToggle {
+.timeSlider-playToggle:enabled {
background-color: $euiColorPrimary !important;
}
diff --git a/src/plugins/controls/public/time_slider/components/time_slider.tsx b/src/plugins/controls/public/time_slider/components/time_slider.tsx
index 0a40e1c8420e..a9b0ffd2508e 100644
--- a/src/plugins/controls/public/time_slider/components/time_slider.tsx
+++ b/src/plugins/controls/public/time_slider/components/time_slider.tsx
@@ -6,11 +6,13 @@
* Side Public License, v 1.
*/
-import React, { FC } from 'react';
import { EuiInputPopover } from '@elastic/eui';
-import { FROM_INDEX, TO_INDEX } from '../time_utils';
-import { getRoundedTimeRangeBounds } from '../time_slider_selectors';
+import React, { FC } from 'react';
+
+import { TimeSlice } from '../../../common/types';
import { useTimeSlider } from '../embeddable/time_slider_embeddable';
+import { getRoundedTimeRangeBounds } from '../time_slider_selectors';
+import { FROM_INDEX, TO_INDEX } from '../time_utils';
import { TimeSliderPopoverButton } from './time_slider_popover_button';
import { TimeSliderPopoverContent } from './time_slider_popover_content';
@@ -18,7 +20,7 @@ import './index.scss';
interface Props {
formatDate: (epoch: number) => string;
- onChange: (value?: [number, number]) => void;
+ onChange: (value?: TimeSlice) => void;
}
export const TimeSlider: FC = (props: Props) => {
diff --git a/src/plugins/controls/public/time_slider/components/time_slider_anchored_range.tsx b/src/plugins/controls/public/time_slider/components/time_slider_anchored_range.tsx
index 9e8a8451d083..041c3301acbc 100644
--- a/src/plugins/controls/public/time_slider/components/time_slider_anchored_range.tsx
+++ b/src/plugins/controls/public/time_slider/components/time_slider_anchored_range.tsx
@@ -9,10 +9,11 @@
import React from 'react';
import { EuiRange, EuiRangeTick } from '@elastic/eui';
import { _SingleRangeChangeEvent } from '@elastic/eui/src/components/form/range/types';
+import { TimeSlice } from '../../../common/types';
interface Props {
- value: [number, number];
- onChange: (value?: [number, number]) => void;
+ value: TimeSlice;
+ onChange: (value?: TimeSlice) => void;
stepSize: number;
ticks: EuiRangeTick[];
timeRangeMin: number;
diff --git a/src/plugins/controls/public/time_slider/components/time_slider_popover_content.tsx b/src/plugins/controls/public/time_slider/components/time_slider_popover_content.tsx
index 1e8a9f838ac0..5878a8983e93 100644
--- a/src/plugins/controls/public/time_slider/components/time_slider_popover_content.tsx
+++ b/src/plugins/controls/public/time_slider/components/time_slider_popover_content.tsx
@@ -14,10 +14,11 @@ import { TimeSliderStrings } from './time_slider_strings';
import { useTimeSlider } from '../embeddable/time_slider_embeddable';
import { TimeSliderAnchoredRange } from './time_slider_anchored_range';
import { TimeSliderSlidingWindowRange } from './time_slider_sliding_window_range';
+import { TimeSlice } from '../../../common/types';
interface Props {
- value: [number, number];
- onChange: (value?: [number, number]) => void;
+ value: TimeSlice;
+ onChange: (value?: TimeSlice) => void;
stepSize: number;
ticks: EuiRangeTick[];
timeRangeMin: number;
diff --git a/src/plugins/controls/public/time_slider/components/time_slider_prepend.tsx b/src/plugins/controls/public/time_slider/components/time_slider_prepend.tsx
index bf27042190ac..0502592a68a8 100644
--- a/src/plugins/controls/public/time_slider/components/time_slider_prepend.tsx
+++ b/src/plugins/controls/public/time_slider/components/time_slider_prepend.tsx
@@ -6,12 +6,14 @@
* Side Public License, v 1.
*/
-import { i18n } from '@kbn/i18n';
-import { first } from 'rxjs/operators';
-import React, { FC, useState } from 'react';
-import { EuiButtonIcon } from '@elastic/eui';
+import { EuiButtonIcon, EuiToolTip } from '@elastic/eui';
+import { ViewMode } from '@kbn/embeddable-plugin/common';
+import React, { FC, useCallback, useMemo, useState } from 'react';
import { Observable, Subscription } from 'rxjs';
+import { first } from 'rxjs/operators';
+import { useControlGroupContainer } from '../../control_group/embeddable/control_group_container';
import { useTimeSlider } from '../embeddable/time_slider_embeddable';
+import { TimeSliderStrings } from './time_slider_strings';
interface Props {
onNext: () => void;
@@ -21,12 +23,18 @@ interface Props {
export const TimeSliderPrepend: FC = (props: Props) => {
const timeSlider = useTimeSlider();
+ const controlGroup = useControlGroupContainer();
+
+ const showApplySelectionsButton = controlGroup.select(
+ (state) => state.explicitInput.showApplySelections
+ );
+ const viewMode = controlGroup.select((state) => state.explicitInput.viewMode);
const [isPaused, setIsPaused] = useState(true);
const [timeoutId, setTimeoutId] = useState(undefined);
const [subscription, setSubscription] = useState(undefined);
- const playNextFrame = () => {
+ const playNextFrame = useCallback(() => {
// advance to next frame
props.onNext();
@@ -42,15 +50,15 @@ export const TimeSliderPrepend: FC = (props: Props) => {
});
setSubscription(nextFrameSubscription);
}
- };
+ }, [props]);
- const onPlay = () => {
+ const onPlay = useCallback(() => {
timeSlider.dispatch.setIsOpen({ isOpen: true });
setIsPaused(false);
playNextFrame();
- };
+ }, [timeSlider.dispatch, playNextFrame]);
- const onPause = () => {
+ const onPause = useCallback(() => {
timeSlider.dispatch.setIsOpen({ isOpen: true });
setIsPaused(true);
if (subscription) {
@@ -61,7 +69,32 @@ export const TimeSliderPrepend: FC = (props: Props) => {
clearTimeout(timeoutId);
setTimeoutId(undefined);
}
- };
+ }, [timeSlider.dispatch, subscription, timeoutId]);
+
+ const PlayButton = useMemo(() => {
+ const Button = (
+
+ );
+ return (
+ <>
+ {showApplySelectionsButton ? (
+
+ {Button}
+
+ ) : (
+ Button
+ )}
+ >
+ );
+ }, [isPaused, onPlay, onPause, showApplySelectionsButton]);
return (
@@ -72,29 +105,13 @@ export const TimeSliderPrepend: FC
= (props: Props) => {
}}
iconType="framePrevious"
color="text"
- aria-label={i18n.translate('controls.timeSlider.previousLabel', {
- defaultMessage: 'Previous time window',
- })}
+ aria-label={TimeSliderStrings.control.getPreviousButtonAriaLabel()}
data-test-subj="timeSlider-previousTimeWindow"
/>
- {props.waitForControlOutputConsumersToLoad$ === undefined ? null : (
-
- )}
+ {props.waitForControlOutputConsumersToLoad$ === undefined ||
+ (showApplySelectionsButton && viewMode === ViewMode.VIEW)
+ ? null
+ : PlayButton}
{
onPause();
@@ -102,9 +119,7 @@ export const TimeSliderPrepend: FC = (props: Props) => {
}}
iconType="frameNext"
color="text"
- aria-label={i18n.translate('controls.timeSlider.nextLabel', {
- defaultMessage: 'Next time window',
- })}
+ aria-label={TimeSliderStrings.control.getNextButtonAriaLabel()}
data-test-subj="timeSlider-nextTimeWindow"
/>
diff --git a/src/plugins/controls/public/time_slider/components/time_slider_sliding_window_range.tsx b/src/plugins/controls/public/time_slider/components/time_slider_sliding_window_range.tsx
index 4b87e8d3405c..8e1f4c2862b6 100644
--- a/src/plugins/controls/public/time_slider/components/time_slider_sliding_window_range.tsx
+++ b/src/plugins/controls/public/time_slider/components/time_slider_sliding_window_range.tsx
@@ -8,10 +8,11 @@
import React from 'react';
import { EuiDualRange, EuiRangeTick } from '@elastic/eui';
+import { TimeSlice } from '../../../common/types';
interface Props {
- value: [number, number];
- onChange: (value?: [number, number]) => void;
+ value: TimeSlice;
+ onChange: (value?: TimeSlice) => void;
stepSize: number;
ticks: EuiRangeTick[];
timeRangeMin: number;
@@ -20,7 +21,7 @@ interface Props {
export function TimeSliderSlidingWindowRange(props: Props) {
function onChange(value?: [number | string, number | string]) {
- props.onChange(value as [number, number]);
+ props.onChange(value as TimeSlice);
}
return (
diff --git a/src/plugins/controls/public/time_slider/components/time_slider_strings.ts b/src/plugins/controls/public/time_slider/components/time_slider_strings.ts
index a80a5d477e1d..8d0e4a65962e 100644
--- a/src/plugins/controls/public/time_slider/components/time_slider_strings.ts
+++ b/src/plugins/controls/public/time_slider/components/time_slider_strings.ts
@@ -18,5 +18,25 @@ export const TimeSliderStrings = {
i18n.translate('controls.timeSlider.settings.unpinStart', {
defaultMessage: 'Unpin start',
}),
+ getPlayButtonAriaLabel: (isPaused: boolean) =>
+ isPaused
+ ? i18n.translate('controls.timeSlider.playLabel', {
+ defaultMessage: 'Play',
+ })
+ : i18n.translate('controls.timeSlider.pauseLabel', {
+ defaultMessage: 'Pause',
+ }),
+ getPreviousButtonAriaLabel: () =>
+ i18n.translate('controls.timeSlider.previousLabel', {
+ defaultMessage: 'Previous time window',
+ }),
+ getNextButtonAriaLabel: () =>
+ i18n.translate('controls.timeSlider.nextLabel', {
+ defaultMessage: 'Next time window',
+ }),
+ getPlayButtonDisabledTooltip: () =>
+ i18n.translate('controls.timeSlider.playButtonTooltip.disabled', {
+ defaultMessage: '"Apply selections automatically" is disabled in Control Settings.',
+ }),
},
};
diff --git a/src/plugins/controls/public/time_slider/embeddable/time_slider_embeddable.tsx b/src/plugins/controls/public/time_slider/embeddable/time_slider_embeddable.tsx
index cd073e5f9462..84ed946f56a9 100644
--- a/src/plugins/controls/public/time_slider/embeddable/time_slider_embeddable.tsx
+++ b/src/plugins/controls/public/time_slider/embeddable/time_slider_embeddable.tsx
@@ -20,7 +20,9 @@ import { KibanaThemeProvider } from '@kbn/react-kibana-context-theme';
import { TIME_SLIDER_CONTROL } from '../..';
import { TimeSliderControlEmbeddableInput } from '../../../common/time_slider/types';
+import { TimeSlice } from '../../../common/types';
import { ControlGroupContainer } from '../../control_group/embeddable/control_group_container';
+import { ControlTimesliceOutput } from '../../control_group/types';
import { pluginServices } from '../../services';
import { ControlsDataService } from '../../services/data/types';
import { ControlsSettingsService } from '../../services/settings/types';
@@ -156,11 +158,36 @@ export class TimeSliderControlEmbeddable
}
};
+ public selectionsToFilters = async (
+ input: Partial
+ ): Promise => {
+ const { timesliceStartAsPercentageOfTimeRange, timesliceEndAsPercentageOfTimeRange } = input;
+ if (
+ timesliceStartAsPercentageOfTimeRange === undefined ||
+ timesliceEndAsPercentageOfTimeRange === undefined
+ ) {
+ return { timeslice: undefined };
+ }
+
+ const {
+ componentState: { stepSize, timeRangeBounds },
+ } = this.getState();
+
+ const timeRange = timeRangeBounds[TO_INDEX] - timeRangeBounds[FROM_INDEX];
+ const from = timeRangeBounds[FROM_INDEX] + timesliceStartAsPercentageOfTimeRange * timeRange;
+ const to = timeRangeBounds[FROM_INDEX] + timesliceEndAsPercentageOfTimeRange * timeRange;
+ const value = [
+ roundDownToNextStepSizeFactor(from, stepSize),
+ roundUpToNextStepSizeFactor(to, stepSize),
+ ] as TimeSlice;
+
+ return { timeslice: value };
+ };
+
private onInputChange() {
const input = this.getInput();
const { timesliceStartAsPercentageOfTimeRange, timesliceEndAsPercentageOfTimeRange } =
this.prevTimesliceAsPercentage ?? {};
-
if (
timesliceStartAsPercentageOfTimeRange !== input.timesliceStartAsPercentageOfTimeRange ||
timesliceEndAsPercentageOfTimeRange !== input.timesliceEndAsPercentageOfTimeRange
@@ -193,25 +220,18 @@ export class TimeSliderControlEmbeddable
private syncWithTimeRange() {
this.prevTimeRange = this.getInput().timeRange;
- const stepSize = this.getState().componentState.stepSize;
+ const { explicitInput: currentInput } = this.getState();
const { timesliceStartAsPercentageOfTimeRange, timesliceEndAsPercentageOfTimeRange } =
- this.getState().explicitInput;
-
+ currentInput;
if (
timesliceStartAsPercentageOfTimeRange !== undefined &&
timesliceEndAsPercentageOfTimeRange !== undefined
) {
- const timeRangeBounds = this.getState().componentState.timeRangeBounds;
- const timeRange = timeRangeBounds[TO_INDEX] - timeRangeBounds[FROM_INDEX];
- const from = timeRangeBounds[FROM_INDEX] + timesliceStartAsPercentageOfTimeRange * timeRange;
- const to = timeRangeBounds[FROM_INDEX] + timesliceEndAsPercentageOfTimeRange * timeRange;
- const value = [
- roundDownToNextStepSizeFactor(from, stepSize),
- roundUpToNextStepSizeFactor(to, stepSize),
- ] as [number, number];
- this.dispatch.publishValue({ value });
- this.dispatch.setValue({ value });
- this.onRangeChange(value[TO_INDEX] - value[FROM_INDEX]);
+ this.selectionsToFilters(currentInput).then(({ timeslice }) => {
+ this.dispatch.publishValue({ value: timeslice });
+ this.dispatch.setValue({ value: timeslice });
+ if (timeslice) this.onRangeChange(timeslice[TO_INDEX] - timeslice[FROM_INDEX]);
+ });
}
}
@@ -226,11 +246,11 @@ export class TimeSliderControlEmbeddable
return;
}
- private debouncedPublishChange = _.debounce((value?: [number, number]) => {
+ private debouncedPublishChange = _.debounce((value?: TimeSlice) => {
this.dispatch.publishValue({ value });
}, 500);
- private getTimeSliceAsPercentageOfTimeRange(value?: [number, number]) {
+ private getTimeSliceAsPercentageOfTimeRange(value?: TimeSlice) {
let timesliceStartAsPercentageOfTimeRange: number | undefined;
let timesliceEndAsPercentageOfTimeRange: number | undefined;
if (value) {
@@ -248,7 +268,7 @@ export class TimeSliderControlEmbeddable
return { timesliceStartAsPercentageOfTimeRange, timesliceEndAsPercentageOfTimeRange };
}
- private onTimesliceChange = (value?: [number, number]) => {
+ private onTimesliceChange = (value?: TimeSlice) => {
const { timesliceStartAsPercentageOfTimeRange, timesliceEndAsPercentageOfTimeRange } =
this.getTimeSliceAsPercentageOfTimeRange(value);
@@ -371,7 +391,7 @@ export class TimeSliderControlEmbeddable
{
+ onChange={(value?: TimeSlice) => {
this.onTimesliceChange(value);
const range = value ? value[TO_INDEX] - value[FROM_INDEX] : undefined;
this.onRangeChange(range);
diff --git a/src/plugins/controls/public/time_slider/time_slider_reducers.ts b/src/plugins/controls/public/time_slider/time_slider_reducers.ts
index 4d4d599a06aa..e4bbda565d73 100644
--- a/src/plugins/controls/public/time_slider/time_slider_reducers.ts
+++ b/src/plugins/controls/public/time_slider/time_slider_reducers.ts
@@ -6,15 +6,17 @@
* Side Public License, v 1.
*/
+import { EuiRangeTick } from '@elastic/eui';
import { PayloadAction } from '@reduxjs/toolkit';
import { WritableDraft } from 'immer/dist/types/types-external';
-import { EuiRangeTick } from '@elastic/eui';
+
+import { TimeSlice } from '../../common/types';
import { TimeSliderReduxState } from './types';
export const timeSliderReducers = {
publishValue: (
state: WritableDraft,
- action: PayloadAction<{ value?: [number, number] }>
+ action: PayloadAction<{ value?: TimeSlice }>
) => {
state.output.timeslice = action.payload.value;
},
@@ -47,7 +49,7 @@ export const timeSliderReducers = {
setValue: (
state: WritableDraft,
action: PayloadAction<{
- value?: [number, number];
+ value?: TimeSlice;
}>
) => {
state.componentState.value = action.payload.value;
diff --git a/src/plugins/controls/public/time_slider/types.ts b/src/plugins/controls/public/time_slider/types.ts
index 9e72b7dd5011..3ec0cead0b75 100644
--- a/src/plugins/controls/public/time_slider/types.ts
+++ b/src/plugins/controls/public/time_slider/types.ts
@@ -11,6 +11,7 @@ import { EuiRangeTick } from '@elastic/eui';
import { ControlOutput } from '../types';
import { TimeSliderControlEmbeddableInput } from '../../common/time_slider/types';
+import { TimeSlice } from '../../common/types';
export * from '../../common/time_slider/types';
@@ -22,7 +23,7 @@ export interface TimeSliderSubjectState {
stepSize: number;
ticks: EuiRangeTick[];
timeRangeBounds: [number, number];
- value?: [number, number];
+ value?: TimeSlice;
}
// public only - redux embeddable state type
diff --git a/src/plugins/controls/public/types.ts b/src/plugins/controls/public/types.ts
index 43b0e12f3fcb..bb1bbf87b62e 100644
--- a/src/plugins/controls/public/types.ts
+++ b/src/plugins/controls/public/types.ts
@@ -8,7 +8,8 @@
import { ReactNode } from 'react';
-import { Filter } from '@kbn/es-query';
+import { DataPublicPluginStart } from '@kbn/data-plugin/public';
+import { DataViewField, DataViewsPublicPluginStart } from '@kbn/data-views-plugin/public';
import {
EmbeddableFactory,
EmbeddableOutput,
@@ -17,18 +18,15 @@ import {
IEmbeddable,
} from '@kbn/embeddable-plugin/public';
import { UiActionsStart } from '@kbn/ui-actions-plugin/public';
-import { DataPublicPluginStart } from '@kbn/data-plugin/public';
-import { DataViewField, DataViewsPublicPluginStart } from '@kbn/data-views-plugin/public';
import { UnifiedSearchPublicPluginStart } from '@kbn/unified-search-plugin/public';
import { ControlInput, ControlWidth, DataControlInput } from '../common/types';
+import { ControlGroupFilterOutput } from './control_group/types';
import { ControlsServiceType } from './services/controls/types';
-export interface CommonControlOutput {
- filters?: Filter[];
+export type CommonControlOutput = ControlGroupFilterOutput & {
dataViewId?: string;
- timeslice?: [number, number];
-}
+};
export type ControlOutput = EmbeddableOutput & CommonControlOutput;
@@ -44,9 +42,14 @@ export type ControlEmbeddable<
> = IEmbeddable & {
isChained?: () => boolean;
renderPrepend?: () => ReactNode | undefined;
+ selectionsToFilters?: (
+ input: Partial
+ ) => Promise;
};
-export interface IClearableControl extends ControlEmbeddable {
+export interface IClearableControl<
+ TClearableControlEmbeddableInput extends ControlInput = ControlInput
+> extends ControlEmbeddable {
clearSelections: () => void;
}
@@ -113,4 +116,4 @@ export interface ControlsPluginStartDeps {
}
// re-export from common
-export type { ControlWidth, ControlInput, DataControlInput, ControlStyle } from '../common/types';
+export type { ControlInput, ControlStyle, ControlWidth, DataControlInput } from '../common/types';
diff --git a/src/plugins/dashboard/common/content_management/cm_services.ts b/src/plugins/dashboard/common/content_management/cm_services.ts
index 14f6a731e140..4e812bbf37b4 100644
--- a/src/plugins/dashboard/common/content_management/cm_services.ts
+++ b/src/plugins/dashboard/common/content_management/cm_services.ts
@@ -13,8 +13,10 @@ import type {
// We export the versioned service definition from this file and not the barrel to avoid adding
// the schemas in the "public" js bundle
-import { serviceDefinition as v1 } from './v1/cm_services';
+import { serviceDefinition as v1 } from './v1';
+import { serviceDefinition as v2 } from './v2';
export const cmServicesDefinition: { [version: Version]: ServicesDefinition } = {
1: v1,
+ 2: v2,
};
diff --git a/src/plugins/dashboard/common/content_management/constants.ts b/src/plugins/dashboard/common/content_management/constants.ts
index dcbb1ac7d697..eaa6575eb82b 100644
--- a/src/plugins/dashboard/common/content_management/constants.ts
+++ b/src/plugins/dashboard/common/content_management/constants.ts
@@ -6,6 +6,6 @@
* Side Public License, v 1.
*/
-export const LATEST_VERSION = 1;
+export const LATEST_VERSION = 2;
export const CONTENT_ID = 'dashboard';
diff --git a/src/plugins/dashboard/common/content_management/index.ts b/src/plugins/dashboard/common/content_management/index.ts
index 5f0a06d35f73..ac4a1373e510 100644
--- a/src/plugins/dashboard/common/content_management/index.ts
+++ b/src/plugins/dashboard/common/content_management/index.ts
@@ -17,8 +17,3 @@ export type {
DashboardAttributes,
SavedDashboardPanel,
} from './latest';
-
-// Today "v1" === "latest" so the export under DashboardV1 namespace is not really useful
-// We leave it as a reference for future version when it will be needed to export/support older types
-// in the UIs.
-export * as DashboardV1 from './v1';
diff --git a/src/plugins/dashboard/common/content_management/latest.ts b/src/plugins/dashboard/common/content_management/latest.ts
index f02d0a348e54..5616c4b4b3ff 100644
--- a/src/plugins/dashboard/common/content_management/latest.ts
+++ b/src/plugins/dashboard/common/content_management/latest.ts
@@ -6,5 +6,5 @@
* Side Public License, v 1.
*/
-// Latest version is 1
-export * from './v1';
+// Latest version is 2
+export * from './v2';
diff --git a/src/plugins/dashboard/common/content_management/v1/cm_services.ts b/src/plugins/dashboard/common/content_management/v1/cm_services.ts
index 3de67a1dd3cd..e1fa81338a19 100644
--- a/src/plugins/dashboard/common/content_management/v1/cm_services.ts
+++ b/src/plugins/dashboard/common/content_management/v1/cm_services.ts
@@ -14,7 +14,16 @@ import {
createResultSchema,
} from '@kbn/content-management-utils';
-const dashboardAttributesSchema = schema.object(
+export const controlGroupInputSchema = schema
+ .object({
+ panelsJSON: schema.maybe(schema.string()),
+ controlStyle: schema.maybe(schema.string()),
+ chainingSystem: schema.maybe(schema.string()),
+ ignoreParentSettingsJSON: schema.maybe(schema.string()),
+ })
+ .extends({}, { unknowns: 'ignore' });
+
+export const dashboardAttributesSchema = schema.object(
{
// General
title: schema.string(),
@@ -39,14 +48,7 @@ const dashboardAttributesSchema = schema.object(
),
// Dashboard Content
- controlGroupInput: schema.maybe(
- schema.object({
- panelsJSON: schema.maybe(schema.string()),
- controlStyle: schema.maybe(schema.string()),
- chainingSystem: schema.maybe(schema.string()),
- ignoreParentSettingsJSON: schema.maybe(schema.string()),
- })
- ),
+ controlGroupInput: schema.maybe(controlGroupInputSchema),
panelsJSON: schema.string({ defaultValue: '[]' }),
optionsJSON: schema.string({ defaultValue: '{}' }),
@@ -57,7 +59,7 @@ const dashboardAttributesSchema = schema.object(
{ unknowns: 'forbid' }
);
-const dashboardSavedObjectSchema = savedObjectSchema(dashboardAttributesSchema);
+export const dashboardSavedObjectSchema = savedObjectSchema(dashboardAttributesSchema);
const searchOptionsSchema = schema.maybe(
schema.object(
diff --git a/src/plugins/dashboard/common/content_management/v1/index.ts b/src/plugins/dashboard/common/content_management/v1/index.ts
index ecfe16506e3e..4fb96a584691 100644
--- a/src/plugins/dashboard/common/content_management/v1/index.ts
+++ b/src/plugins/dashboard/common/content_management/v1/index.ts
@@ -6,11 +6,17 @@
* Side Public License, v 1.
*/
-import { DashboardCrudTypes } from './types';
export type {
GridData,
+ DashboardItem,
DashboardCrudTypes,
DashboardAttributes,
SavedDashboardPanel,
} from './types';
-export type DashboardItem = DashboardCrudTypes['Item'];
+
+export {
+ serviceDefinition,
+ dashboardSavedObjectSchema,
+ controlGroupInputSchema,
+ dashboardAttributesSchema,
+} from './cm_services';
diff --git a/src/plugins/dashboard/common/content_management/v1/types.ts b/src/plugins/dashboard/common/content_management/v1/types.ts
index 05d216e8a785..55546f9f0679 100644
--- a/src/plugins/dashboard/common/content_management/v1/types.ts
+++ b/src/plugins/dashboard/common/content_management/v1/types.ts
@@ -28,6 +28,8 @@ export type DashboardCrudTypes = ContentManagementCrudTypes<
}
>;
+export type DashboardItem = DashboardCrudTypes['Item'];
+
/**
* Grid type for React Grid Layout
*/
@@ -59,9 +61,14 @@ export interface SavedDashboardPanel {
version?: string;
}
+type ControlGroupAttributesV1 = Pick<
+ RawControlGroupAttributes,
+ 'panelsJSON' | 'chainingSystem' | 'controlStyle' | 'ignoreParentSettingsJSON'
+>;
+
/* eslint-disable-next-line @typescript-eslint/consistent-type-definitions */
export type DashboardAttributes = {
- controlGroupInput?: RawControlGroupAttributes;
+ controlGroupInput?: ControlGroupAttributesV1;
refreshInterval?: RefreshInterval;
timeRestore: boolean;
optionsJSON?: string;
diff --git a/src/plugins/dashboard/common/content_management/v2/cm_services.ts b/src/plugins/dashboard/common/content_management/v2/cm_services.ts
new file mode 100644
index 000000000000..2c9bb746312c
--- /dev/null
+++ b/src/plugins/dashboard/common/content_management/v2/cm_services.ts
@@ -0,0 +1,77 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+import { schema } from '@kbn/config-schema';
+import {
+ createResultSchema,
+ objectTypeToGetResultSchema,
+ savedObjectSchema,
+} from '@kbn/content-management-utils';
+import type { ContentManagementServicesDefinition as ServicesDefinition } from '@kbn/object-versioning';
+import {
+ controlGroupInputSchema as controlGroupInputSchemaV1,
+ dashboardAttributesSchema as dashboardAttributesSchemaV1,
+ serviceDefinition as serviceDefinitionV1,
+} from '../v1';
+
+export const dashboardAttributesSchema = dashboardAttributesSchemaV1.extends(
+ {
+ controlGroupInput: schema.maybe(
+ controlGroupInputSchemaV1.extends(
+ {
+ showApplySelections: schema.maybe(schema.boolean()),
+ },
+ { unknowns: 'ignore' }
+ )
+ ),
+ },
+ { unknowns: 'ignore' }
+);
+
+export const dashboardSavedObjectSchema = savedObjectSchema(dashboardAttributesSchema);
+
+// Content management service definition.
+export const serviceDefinition: ServicesDefinition = {
+ get: {
+ out: {
+ result: {
+ schema: objectTypeToGetResultSchema(dashboardSavedObjectSchema),
+ },
+ },
+ },
+ create: {
+ in: {
+ ...serviceDefinitionV1?.create?.in,
+ data: {
+ schema: dashboardAttributesSchema,
+ },
+ },
+ out: {
+ result: {
+ schema: createResultSchema(dashboardSavedObjectSchema),
+ },
+ },
+ },
+ update: {
+ in: {
+ ...serviceDefinitionV1.update?.in,
+ data: {
+ schema: dashboardAttributesSchema,
+ },
+ },
+ },
+ search: {
+ in: serviceDefinitionV1.search?.in,
+ },
+ mSearch: {
+ out: {
+ result: {
+ schema: dashboardSavedObjectSchema,
+ },
+ },
+ },
+};
diff --git a/src/plugins/dashboard/common/content_management/v2/index.ts b/src/plugins/dashboard/common/content_management/v2/index.ts
new file mode 100644
index 000000000000..15105c60d5ab
--- /dev/null
+++ b/src/plugins/dashboard/common/content_management/v2/index.ts
@@ -0,0 +1,16 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+export {
+ serviceDefinition,
+ dashboardSavedObjectSchema,
+ dashboardAttributesSchema,
+} from './cm_services';
+
+export type { GridData, DashboardItem, SavedDashboardPanel } from '../v1/types'; // no changes made to types from v1 to v2
+export type { DashboardCrudTypes, DashboardAttributes } from './types';
diff --git a/src/plugins/dashboard/common/content_management/v2/types.ts b/src/plugins/dashboard/common/content_management/v2/types.ts
new file mode 100644
index 000000000000..00859c1f5cae
--- /dev/null
+++ b/src/plugins/dashboard/common/content_management/v2/types.ts
@@ -0,0 +1,40 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import {
+ ContentManagementCrudTypes,
+ SavedObjectCreateOptions,
+ SavedObjectUpdateOptions,
+} from '@kbn/content-management-utils';
+import { RawControlGroupAttributes } from '@kbn/controls-plugin/common';
+import { DashboardContentType } from '../types';
+import { DashboardAttributes as DashboardAttributesV1 } from '../v1/types';
+
+type ControlGroupAttributesV2 = Pick<
+ RawControlGroupAttributes,
+ | 'panelsJSON'
+ | 'chainingSystem'
+ | 'controlStyle'
+ | 'ignoreParentSettingsJSON'
+ | 'showApplySelections'
+>;
+
+export type DashboardAttributes = Omit & {
+ controlGroupInput?: ControlGroupAttributesV2;
+};
+
+export type DashboardCrudTypes = ContentManagementCrudTypes<
+ DashboardContentType,
+ DashboardAttributes,
+ Pick,
+ Pick,
+ {
+ /** Flag to indicate to only search the text on the "title" field */
+ onlyTitle?: boolean;
+ }
+>;
diff --git a/src/plugins/dashboard/public/dashboard_app/_dashboard_app_strings.ts b/src/plugins/dashboard/public/dashboard_app/_dashboard_app_strings.ts
index df343c3cf9d9..1d53561b619d 100644
--- a/src/plugins/dashboard/public/dashboard_app/_dashboard_app_strings.ts
+++ b/src/plugins/dashboard/public/dashboard_app/_dashboard_app_strings.ts
@@ -28,7 +28,7 @@ export const dashboardReadonlyBadge = {
export const dashboardManagedBadge = {
getTooltip: () =>
i18n.translate('dashboard.badge.managed.tooltip', {
- defaultMessage: 'This dashboard is system managed. Clone this dashboard to make changes.',
+ defaultMessage: 'Elastic manages this dashboard. Clone it to make changes.',
}),
};
diff --git a/src/plugins/dashboard/public/dashboard_container/embeddable/api/run_save_functions.tsx b/src/plugins/dashboard/public/dashboard_container/embeddable/api/run_save_functions.tsx
index 64187ccd2d9e..5e4f12956461 100644
--- a/src/plugins/dashboard/public/dashboard_container/embeddable/api/run_save_functions.tsx
+++ b/src/plugins/dashboard/public/dashboard_container/embeddable/api/run_save_functions.tsx
@@ -153,7 +153,7 @@ export function runSaveAs(this: DashboardContainer) {
this.dispatch.setStateFromSaveModal(stateFromSaveModal);
this.dispatch.setLastSavedInput(dashboardStateToSave);
if (this.controlGroup && persistableControlGroupInput) {
- this.controlGroup.dispatch.setLastSavedInput(persistableControlGroupInput);
+ this.controlGroup.setSavedState(persistableControlGroupInput);
}
});
}
@@ -214,7 +214,7 @@ export async function runQuickSave(this: DashboardContainer) {
this.dispatch.setLastSavedInput(dashboardStateToSave);
this.lastSavedState.next();
if (this.controlGroup && persistableControlGroupInput) {
- this.controlGroup.dispatch.setLastSavedInput(persistableControlGroupInput);
+ this.controlGroup.setSavedState(persistableControlGroupInput);
}
return saveResult;
diff --git a/src/plugins/dashboard/public/dashboard_container/external_api/dashboard_api.ts b/src/plugins/dashboard/public/dashboard_container/external_api/dashboard_api.ts
index 42915c0aa397..ad9a32d31f86 100644
--- a/src/plugins/dashboard/public/dashboard_container/external_api/dashboard_api.ts
+++ b/src/plugins/dashboard/public/dashboard_container/external_api/dashboard_api.ts
@@ -8,12 +8,24 @@
import type { DataView } from '@kbn/data-views-plugin/public';
import { CanDuplicatePanels, CanExpandPanels, TracksOverlays } from '@kbn/presentation-containers';
-import { HasTypeDisplayName, PublishesSavedObjectId } from '@kbn/presentation-publishing';
+import {
+ HasType,
+ HasTypeDisplayName,
+ PublishesLocalUnifiedSearch,
+ PublishesPanelTitle,
+ PublishesSavedObjectId,
+} from '@kbn/presentation-publishing';
import { DashboardPanelState } from '../../../common';
import { DashboardContainer } from '../embeddable/dashboard_container';
// TODO lock down DashboardAPI
-export type DashboardAPI = DashboardContainer;
+export type DashboardAPI = DashboardContainer &
+ Partial<
+ HasType<'dashboard'> &
+ PublishesLocalUnifiedSearch &
+ PublishesPanelTitle &
+ PublishesSavedObjectId
+ >;
export type AwaitingDashboardAPI = DashboardAPI | null;
export const buildApiFromDashboardContainer = (container?: DashboardContainer) => container ?? null;
diff --git a/src/plugins/dashboard/public/dashboard_container/index.ts b/src/plugins/dashboard/public/dashboard_container/index.ts
index d09b5014064d..e0b421d65fd1 100644
--- a/src/plugins/dashboard/public/dashboard_container/index.ts
+++ b/src/plugins/dashboard/public/dashboard_container/index.ts
@@ -6,11 +6,12 @@
* Side Public License, v 1.
*/
+import { LATEST_VERSION } from '../../common/content_management';
import { convertNumberToDashboardVersion } from '../services/dashboard_content_management/lib/dashboard_versioning';
export const DASHBOARD_CONTAINER_TYPE = 'dashboard';
-export const LATEST_DASHBOARD_CONTAINER_VERSION = convertNumberToDashboardVersion(1);
+export const LATEST_DASHBOARD_CONTAINER_VERSION = convertNumberToDashboardVersion(LATEST_VERSION);
export type { DashboardContainer } from './embeddable/dashboard_container';
export {
diff --git a/src/plugins/dashboard/public/services/dashboard_content_management/lib/save_dashboard_state.ts b/src/plugins/dashboard/public/services/dashboard_content_management/lib/save_dashboard_state.ts
index a2b0c3f8609b..93f535b9b4d4 100644
--- a/src/plugins/dashboard/public/services/dashboard_content_management/lib/save_dashboard_state.ts
+++ b/src/plugins/dashboard/public/services/dashboard_content_management/lib/save_dashboard_state.ts
@@ -91,7 +91,6 @@ export const saveDashboardState = async ({
query,
title,
filters,
- version,
timeRestore,
description,
@@ -153,7 +152,7 @@ export const saveDashboardState = async ({
: undefined;
const rawDashboardAttributes: DashboardAttributes = {
- version: convertDashboardVersionToNumber(version ?? LATEST_DASHBOARD_CONTAINER_VERSION),
+ version: convertDashboardVersionToNumber(LATEST_DASHBOARD_CONTAINER_VERSION),
controlGroupInput: serializeControlGroupInput(controlGroupInput),
kibanaSavedObjectMeta: { searchSourceJSON },
description: description ?? '',
diff --git a/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.test.ts b/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.test.ts
new file mode 100644
index 000000000000..3e5c5d3a5b13
--- /dev/null
+++ b/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.test.ts
@@ -0,0 +1,59 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import {
+ createModelVersionTestMigrator,
+ type ModelVersionTestMigrator,
+} from '@kbn/core-test-helpers-model-versions';
+import { createEmbeddableSetupMock } from '@kbn/embeddable-plugin/server/mocks';
+
+import { createDashboardSavedObjectType } from './dashboard_saved_object';
+
+const embeddableSetupMock = createEmbeddableSetupMock();
+
+describe('dashboard saved object model version transformations', () => {
+ let migrator: ModelVersionTestMigrator;
+
+ beforeEach(() => {
+ migrator = createModelVersionTestMigrator({
+ type: createDashboardSavedObjectType({ migrationDeps: { embeddable: embeddableSetupMock } }),
+ });
+ });
+
+ describe('model version 2', () => {
+ const dashboard = {
+ id: 'some-id',
+ type: 'dashboard',
+ attributes: {
+ title: 'Some Title',
+ description: 'some description',
+ panelsJSON: 'some panels',
+ kibanaSavedObjectMeta: {},
+ optionsJSON: 'some options',
+ controlGroupInput: {},
+ },
+ references: [],
+ };
+
+ it('should properly remove the controlGroupInput.showApplySelections field when converting from v2 to v1', () => {
+ const migrated = migrator.migrate({
+ document: {
+ ...dashboard,
+ attributes: {
+ ...dashboard.attributes,
+ controlGroupInput: { showApplySelections: false },
+ },
+ },
+ fromVersion: 2,
+ toVersion: 1,
+ });
+
+ expect(migrated.attributes).toEqual(dashboard.attributes);
+ });
+ });
+});
diff --git a/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.ts b/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.ts
index 31595cb6268b..2cf913919b91 100644
--- a/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.ts
+++ b/src/plugins/dashboard/server/dashboard_saved_object/dashboard_saved_object.ts
@@ -6,9 +6,11 @@
* Side Public License, v 1.
*/
-import { schema } from '@kbn/config-schema';
import { ANALYTICS_SAVED_OBJECT_INDEX } from '@kbn/core-saved-objects-server';
import { SavedObjectsType } from '@kbn/core/server';
+
+import { dashboardAttributesSchema as dashboardAttributesSchemaV1 } from '../../common/content_management/v1';
+import { dashboardAttributesSchema as dashboardAttributesSchemaV2 } from '../../common/content_management/v2';
import {
createDashboardSavedObjectTypeMigrations,
DashboardSavedObjectTypeMigrationsDeps,
@@ -38,6 +40,33 @@ export const createDashboardSavedObjectType = ({
};
},
},
+ modelVersions: {
+ 1: {
+ changes: [],
+ schemas: {
+ forwardCompatibility: dashboardAttributesSchemaV1.extends({}, { unknowns: 'ignore' }),
+ create: dashboardAttributesSchemaV1,
+ },
+ },
+ 2: {
+ changes: [
+ {
+ type: 'mappings_addition',
+ addedMappings: {
+ controlGroupInput: {
+ properties: {
+ showApplySelections: { type: 'boolean', index: false, doc_values: false },
+ },
+ },
+ },
+ },
+ ],
+ schemas: {
+ forwardCompatibility: dashboardAttributesSchemaV2.extends({}, { unknowns: 'ignore' }),
+ create: dashboardAttributesSchemaV2,
+ },
+ },
+ },
mappings: {
properties: {
description: { type: 'text' },
@@ -60,6 +89,7 @@ export const createDashboardSavedObjectType = ({
controlStyle: { type: 'keyword', index: false, doc_values: false },
chainingSystem: { type: 'keyword', index: false, doc_values: false },
panelsJSON: { type: 'text', index: false },
+ showApplySelections: { type: 'boolean', index: false, doc_values: false },
ignoreParentSettingsJSON: { type: 'text', index: false },
},
},
@@ -71,45 +101,7 @@ export const createDashboardSavedObjectType = ({
},
},
schemas: {
- '8.9.0': schema.object({
- // General
- title: schema.string(),
- description: schema.string({ defaultValue: '' }),
-
- // Search
- kibanaSavedObjectMeta: schema.object({
- searchSourceJSON: schema.maybe(schema.string()),
- }),
-
- // Time
- timeRestore: schema.maybe(schema.boolean()),
- timeFrom: schema.maybe(schema.string()),
- timeTo: schema.maybe(schema.string()),
- refreshInterval: schema.maybe(
- schema.object({
- pause: schema.boolean(),
- value: schema.number(),
- display: schema.maybe(schema.string()),
- section: schema.maybe(schema.number()),
- })
- ),
-
- // Dashboard Content
- controlGroupInput: schema.maybe(
- schema.object({
- panelsJSON: schema.maybe(schema.string()),
- controlStyle: schema.maybe(schema.string()),
- chainingSystem: schema.maybe(schema.string()),
- ignoreParentSettingsJSON: schema.maybe(schema.string()),
- })
- ),
- panelsJSON: schema.string({ defaultValue: '[]' }),
- optionsJSON: schema.string({ defaultValue: '{}' }),
-
- // Legacy
- hits: schema.maybe(schema.number()),
- version: schema.maybe(schema.number()),
- }),
+ '8.9.0': dashboardAttributesSchemaV1,
},
migrations: () => createDashboardSavedObjectTypeMigrations(migrationDeps),
});
diff --git a/src/plugins/dashboard/tsconfig.json b/src/plugins/dashboard/tsconfig.json
index 371ec81c3d2c..f3245510cb6b 100644
--- a/src/plugins/dashboard/tsconfig.json
+++ b/src/plugins/dashboard/tsconfig.json
@@ -76,6 +76,7 @@
"@kbn/content-management-table-list-view-common",
"@kbn/shared-ux-utility",
"@kbn/managed-content-badge",
+ "@kbn/core-test-helpers-model-versions",
],
"exclude": ["target/**/*"]
}
diff --git a/src/plugins/discover/public/__mocks__/services.ts b/src/plugins/discover/public/__mocks__/services.ts
index 6d617e38d4df..fff99c922375 100644
--- a/src/plugins/discover/public/__mocks__/services.ts
+++ b/src/plugins/discover/public/__mocks__/services.ts
@@ -15,6 +15,7 @@ import {
chromeServiceMock,
coreMock,
docLinksServiceMock,
+ scopedHistoryMock,
themeServiceMock,
} from '@kbn/core/public/mocks';
import {
@@ -42,6 +43,7 @@ import { LocalStorageMock } from './local_storage_mock';
import { createDiscoverDataViewsMock } from './data_views';
import { SearchSourceDependencies } from '@kbn/data-plugin/common';
import { SearchResponse } from '@elastic/elasticsearch/lib/api/types';
+import { urlTrackerMock } from './url_tracker.mock';
export function createDiscoverServicesMock(): DiscoverServices {
const dataPlugin = dataPluginMock.createStartContract();
@@ -146,12 +148,13 @@ export function createDiscoverServicesMock(): DiscoverServices {
core: corePluginMock,
charts: chartPluginMock.createSetupContract(),
chrome: chromeServiceMock.createStartContract(),
- history: () => ({
+ history: {
location: {
search: '',
},
listen: jest.fn(),
- }),
+ },
+ getScopedHistory: () => scopedHistoryMock.create(),
data: dataPlugin,
docLinks: docLinksServiceMock.createStartContract(),
capabilities: {
@@ -228,6 +231,8 @@ export function createDiscoverServicesMock(): DiscoverServices {
},
contextLocator: { getRedirectUrl: jest.fn(() => '') },
singleDocLocator: { getRedirectUrl: jest.fn(() => '') },
+ urlTracker: urlTrackerMock,
+ setHeaderActionMenu: jest.fn(),
} as unknown as DiscoverServices;
}
diff --git a/src/plugins/discover/public/__mocks__/url_tracker.mock.ts b/src/plugins/discover/public/__mocks__/url_tracker.mock.ts
index f7cc4d0a6142..c9e2558d66fc 100644
--- a/src/plugins/discover/public/__mocks__/url_tracker.mock.ts
+++ b/src/plugins/discover/public/__mocks__/url_tracker.mock.ts
@@ -5,7 +5,8 @@
* in compliance with, at your election, the Elastic License 2.0 or the Server
* Side Public License, v 1.
*/
-import { UrlTracker } from '../kibana_services';
+
+import { UrlTracker } from '../build_services';
export const urlTrackerMock = {
setTrackedUrl: jest.fn(),
diff --git a/src/plugins/discover/public/application/context/context_app.test.tsx b/src/plugins/discover/public/application/context/context_app.test.tsx
index b05dc3ca36e7..42ef78f6f757 100644
--- a/src/plugins/discover/public/application/context/context_app.test.tsx
+++ b/src/plugins/discover/public/application/context/context_app.test.tsx
@@ -59,7 +59,7 @@ describe('ContextApp test', () => {
notifications: { toasts: [] },
theme: { theme$: themeServiceMock.createStartContract().theme$ },
},
- history: () => history,
+ history,
fieldFormats: {
getDefaultInstance: jest.fn(() => ({ convert: (value: unknown) => value })),
getFormatterForField: jest.fn(() => ({ convert: (value: unknown) => value })),
diff --git a/src/plugins/discover/public/application/context/context_app_route.tsx b/src/plugins/discover/public/application/context/context_app_route.tsx
index 61def9cff3e6..d278b729e83a 100644
--- a/src/plugins/discover/public/application/context/context_app_route.tsx
+++ b/src/plugins/discover/public/application/context/context_app_route.tsx
@@ -9,12 +9,11 @@ import React, { useEffect, useMemo } from 'react';
import { useParams } from 'react-router-dom';
import { EuiEmptyPrompt } from '@elastic/eui';
import { FormattedMessage } from '@kbn/i18n-react';
-import type { ScopedHistory } from '@kbn/core/public';
import { ContextApp } from './context_app';
import { LoadingIndicator } from '../../components/common/loading_indicator';
-import { getScopedHistory } from '../../kibana_services';
import { useDataView } from '../../hooks/use_data_view';
import type { ContextHistoryLocationState } from './services/locator';
+import { useDiscoverServices } from '../../hooks/use_discover_services';
export interface ContextUrlParams {
dataViewId: string;
@@ -22,9 +21,10 @@ export interface ContextUrlParams {
}
export function ContextAppRoute() {
+ const scopedHistory = useDiscoverServices().getScopedHistory();
const locationState = useMemo(
- () => getScopedHistory().location.state as ContextHistoryLocationState | undefined,
- []
+ () => scopedHistory?.location.state as ContextHistoryLocationState | undefined,
+ [scopedHistory?.location.state]
);
/**
@@ -32,18 +32,15 @@ export function ContextAppRoute() {
* Should be removed once url state will be deleted from context page.
*/
useEffect(() => {
- const scopedHistory = getScopedHistory() as ScopedHistory<
- ContextHistoryLocationState | undefined
- >;
- const unlisten = scopedHistory.listen((location) => {
+ const unlisten = scopedHistory?.listen((location) => {
const currentState = location.state;
if (!currentState?.referrer && locationState) {
const newLocation = { ...location, state: { ...currentState, ...locationState } };
scopedHistory.replace(newLocation);
}
});
- return () => unlisten();
- }, [locationState]);
+ return () => unlisten?.();
+ }, [locationState, scopedHistory]);
const { dataViewId: encodedDataViewId, id } = useParams();
const dataViewId = decodeURIComponent(encodedDataViewId);
diff --git a/src/plugins/discover/public/application/context/hooks/use_context_app_state.ts b/src/plugins/discover/public/application/context/hooks/use_context_app_state.ts
index 74e4bab05332..5a05c53ada20 100644
--- a/src/plugins/discover/public/application/context/hooks/use_context_app_state.ts
+++ b/src/plugins/discover/public/application/context/hooks/use_context_app_state.ts
@@ -25,7 +25,7 @@ export function useContextAppState({
return getState({
defaultSize: parseInt(config.get(CONTEXT_DEFAULT_SIZE_SETTING), 10),
storeInSessionStorage: config.get('state:storeInSessionStorage'),
- history: history(),
+ history,
toasts: core.notifications.toasts,
uiSettings: config,
data: services.data,
diff --git a/src/plugins/discover/public/application/discover_router.test.tsx b/src/plugins/discover/public/application/discover_router.test.tsx
index 9ec7b7ed52fa..479abb551172 100644
--- a/src/plugins/discover/public/application/discover_router.test.tsx
+++ b/src/plugins/discover/public/application/discover_router.test.tsx
@@ -50,7 +50,6 @@ const gatherRoutes = (wrapper: ShallowWrapper) => {
};
const props: DiscoverRoutesProps = {
- isDev: false,
customizationCallbacks: [],
customizationContext: mockCustomizationContext,
};
@@ -157,7 +156,6 @@ describe('CustomDiscoverRoutes', () => {
);
expect(component.find(DiscoverRoutes).getElement()).toMatchObject(
@@ -165,7 +163,6 @@ describe('CustomDiscoverRoutes', () => {
prefix={addProfile('', mockProfile)}
customizationCallbacks={callbacks}
customizationContext={mockCustomizationContext}
- isDev={props.isDev}
/>
);
});
@@ -176,7 +173,6 @@ describe('CustomDiscoverRoutes', () => {
);
expect(component.find(NotFoundRoute).getElement()).toMatchObject();
@@ -195,7 +191,6 @@ describe('DiscoverRouter', () => {
history={history}
profileRegistry={profileRegistry}
customizationContext={mockCustomizationContext}
- isDev={props.isDev}
/>
);
gatherRoutes(component);
@@ -206,7 +201,6 @@ describe('DiscoverRouter', () => {
);
});
@@ -216,7 +210,6 @@ describe('DiscoverRouter', () => {
);
});
diff --git a/src/plugins/discover/public/application/discover_router.tsx b/src/plugins/discover/public/application/discover_router.tsx
index 70c56b864e8e..a9d252127013 100644
--- a/src/plugins/discover/public/application/discover_router.tsx
+++ b/src/plugins/discover/public/application/discover_router.tsx
@@ -26,7 +26,6 @@ export interface DiscoverRoutesProps {
prefix?: string;
customizationCallbacks: CustomizationCallback[];
customizationContext: DiscoverCustomizationContext;
- isDev: boolean;
}
export const DiscoverRoutes = ({ prefix, ...mainRouteProps }: DiscoverRoutesProps) => {
@@ -68,7 +67,6 @@ export const DiscoverRoutes = ({ prefix, ...mainRouteProps }: DiscoverRoutesProp
interface CustomDiscoverRoutesProps {
profileRegistry: DiscoverProfileRegistry;
customizationContext: DiscoverCustomizationContext;
- isDev: boolean;
}
export const CustomDiscoverRoutes = ({ profileRegistry, ...props }: CustomDiscoverRoutesProps) => {
@@ -96,7 +94,6 @@ export interface DiscoverRouterProps {
profileRegistry: DiscoverProfileRegistry;
customizationContext: DiscoverCustomizationContext;
history: History;
- isDev: boolean;
}
export const DiscoverRouter = ({
diff --git a/src/plugins/discover/public/application/doc/single_doc_route.tsx b/src/plugins/discover/public/application/doc/single_doc_route.tsx
index ad50a508fc0e..3a3d10dcd0e9 100644
--- a/src/plugins/discover/public/application/doc/single_doc_route.tsx
+++ b/src/plugins/discover/public/application/doc/single_doc_route.tsx
@@ -14,7 +14,6 @@ import { i18n } from '@kbn/i18n';
import { LoadingIndicator } from '../../components/common/loading_indicator';
import { Doc } from './components/doc';
import { useDiscoverServices } from '../../hooks/use_discover_services';
-import { getScopedHistory } from '../../kibana_services';
import { DiscoverError } from '../../components/common/error_alert';
import { useDataView } from '../../hooks/use_data_view';
import { DocHistoryLocationState } from './locator';
@@ -25,7 +24,7 @@ export interface DocUrlParams {
}
export const SingleDocRoute = () => {
- const { timefilter, core } = useDiscoverServices();
+ const { timefilter, core, getScopedHistory } = useDiscoverServices();
const { search } = useLocation();
const { dataViewId, index } = useParams();
@@ -33,8 +32,8 @@ export const SingleDocRoute = () => {
const id = query.get('id');
const locationState = useMemo(
- () => getScopedHistory().location.state as DocHistoryLocationState | undefined,
- []
+ () => getScopedHistory()?.location.state,
+ [getScopedHistory]
);
useExecutionContext(core.executionContext, {
diff --git a/src/plugins/discover/public/application/index.tsx b/src/plugins/discover/public/application/index.tsx
index df592ac7ffdb..89dd06d2104d 100644
--- a/src/plugins/discover/public/application/index.tsx
+++ b/src/plugins/discover/public/application/index.tsx
@@ -19,7 +19,6 @@ export interface RenderAppProps {
services: DiscoverServices;
profileRegistry: DiscoverProfileRegistry;
customizationContext: DiscoverCustomizationContext;
- isDev: boolean;
}
export const renderApp = ({
@@ -27,11 +26,9 @@ export const renderApp = ({
services,
profileRegistry,
customizationContext,
- isDev,
}: RenderAppProps) => {
- const { history: getHistory, capabilities, chrome, data, core } = services;
+ const { history, capabilities, chrome, data, core } = services;
- const history = getHistory();
if (!capabilities.discover.save) {
chrome.setBadge({
text: i18n.translate('discover.badge.readOnly.text', {
@@ -49,7 +46,6 @@ export const renderApp = ({
profileRegistry={profileRegistry}
customizationContext={customizationContext}
history={history}
- isDev={isDev}
/>,
{
theme: core.theme,
diff --git a/src/plugins/discover/public/application/main/components/layout/__stories__/discover_layout.stories.tsx b/src/plugins/discover/public/application/main/components/layout/__stories__/discover_layout.stories.tsx
index 4e143c80d96d..38b9fed87793 100644
--- a/src/plugins/discover/public/application/main/components/layout/__stories__/discover_layout.stories.tsx
+++ b/src/plugins/discover/public/application/main/components/layout/__stories__/discover_layout.stories.tsx
@@ -15,9 +15,6 @@ import { getDataViewMock } from '../../../../../__mocks__/__storybook_mocks__/ge
import { withDiscoverServices } from '../../../../../__mocks__/__storybook_mocks__/with_discover_services';
import { getDocumentsLayoutProps, getPlainRecordLayoutProps } from './get_layout_props';
import { DiscoverLayout, DiscoverLayoutProps } from '../discover_layout';
-import { setHeaderActionMenuMounter } from '../../../../../kibana_services';
-
-setHeaderActionMenuMounter(() => void 0);
const DiscoverLayoutStory = (layoutProps: DiscoverLayoutProps) => {
const [state, setState] = useState({});
diff --git a/src/plugins/discover/public/application/main/components/layout/discover_documents.test.tsx b/src/plugins/discover/public/application/main/components/layout/discover_documents.test.tsx
index 62c38fe43a3b..bb085774768d 100644
--- a/src/plugins/discover/public/application/main/components/layout/discover_documents.test.tsx
+++ b/src/plugins/discover/public/application/main/components/layout/discover_documents.test.tsx
@@ -11,7 +11,6 @@ import { act } from 'react-dom/test-utils';
import { BehaviorSubject } from 'rxjs';
import { findTestSubject } from '@elastic/eui/lib/test';
import { mountWithIntl } from '@kbn/test-jest-helpers';
-import { setHeaderActionMenuMounter } from '../../../../kibana_services';
import { DataDocuments$ } from '../../services/discover_data_state_container';
import { discoverServiceMock } from '../../../../__mocks__/services';
import { FetchStatus } from '../../../types';
@@ -27,8 +26,6 @@ import { DiscoverCustomization, DiscoverCustomizationProvider } from '../../../.
import { createCustomizationService } from '../../../../customizations/customization_service';
import { DiscoverGrid } from '../../../../components/discover_grid';
-setHeaderActionMenuMounter(jest.fn());
-
const customisationService = createCustomizationService();
async function mountComponent(fetchStatus: FetchStatus, hits: EsHitRecord[]) {
diff --git a/src/plugins/discover/public/application/main/components/layout/discover_layout.test.tsx b/src/plugins/discover/public/application/main/components/layout/discover_layout.test.tsx
index 9788273ea5f6..2d61a4dbdd7d 100644
--- a/src/plugins/discover/public/application/main/components/layout/discover_layout.test.tsx
+++ b/src/plugins/discover/public/application/main/components/layout/discover_layout.test.tsx
@@ -11,7 +11,6 @@ import { BehaviorSubject, of } from 'rxjs';
import { EuiPageSidebar } from '@elastic/eui';
import { mountWithIntl } from '@kbn/test-jest-helpers';
import type { Query, AggregateQuery } from '@kbn/es-query';
-import { setHeaderActionMenuMounter } from '../../../../kibana_services';
import { DiscoverLayout } from './discover_layout';
import { dataViewMock, esHitsMock } from '@kbn/discover-utils/src/__mocks__';
import { savedSearchMock } from '../../../../__mocks__/saved_search';
@@ -46,8 +45,6 @@ jest.mock('@elastic/eui', () => ({
useResizeObserver: jest.fn(() => ({ width: 1000, height: 1000 })),
}));
-setHeaderActionMenuMounter(jest.fn());
-
async function mountComponent(
dataView: DataView,
prevSidebarClosed?: boolean,
diff --git a/src/plugins/discover/public/application/main/components/layout/use_discover_histogram.ts b/src/plugins/discover/public/application/main/components/layout/use_discover_histogram.ts
index 871edb89d15a..52e184e25e16 100644
--- a/src/plugins/discover/public/application/main/components/layout/use_discover_histogram.ts
+++ b/src/plugins/discover/public/application/main/components/layout/use_discover_histogram.ts
@@ -28,7 +28,6 @@ import useObservable from 'react-use/lib/useObservable';
import type { RequestAdapter } from '@kbn/inspector-plugin/common';
import { useDiscoverCustomization } from '../../../../customizations';
import { useDiscoverServices } from '../../../../hooks/use_discover_services';
-import { getUiActions } from '../../../../kibana_services';
import { FetchStatus } from '../../../types';
import type { InspectorAdapters } from '../../hooks/use_inspector';
import { checkHitCount, sendErrorTo } from '../../hooks/use_saved_search_messages';
@@ -311,8 +310,6 @@ export const useDiscoverHistogram = ({
const histogramCustomization = useDiscoverCustomization('unified_histogram');
- const servicesMemoized = useMemo(() => ({ ...services, uiActions: getUiActions() }), [services]);
-
const filtersMemoized = useMemo(
() => [...(filters ?? []), ...customFilters],
[filters, customFilters]
@@ -324,7 +321,7 @@ export const useDiscoverHistogram = ({
return {
ref,
getCreationOptions,
- services: servicesMemoized,
+ services,
dataView: isPlainRecord ? textBasedDataView : dataView,
query: isPlainRecord ? textBasedQuery : query,
filters: filtersMemoized,
diff --git a/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.test.tsx b/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.test.tsx
index 9c976b83c1dc..41a90d7a8520 100644
--- a/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.test.tsx
+++ b/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.test.tsx
@@ -145,14 +145,6 @@ const mockCalcFieldCounts = jest.fn(() => {
return mockfieldCounts;
});
-jest.mock('../../../../kibana_services', () => ({
- getUiActions: jest.fn(() => {
- return {
- getTriggerCompatibleActions: jest.fn(() => []),
- };
- }),
-}));
-
jest.mock('../../utils/calc_field_counts', () => ({
calcFieldCounts: () => mockCalcFieldCounts(),
}));
diff --git a/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.tsx b/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.tsx
index fc492bc48baa..ae1e26b54896 100644
--- a/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.tsx
+++ b/src/plugins/discover/public/application/main/components/sidebar/discover_sidebar_responsive.tsx
@@ -31,7 +31,6 @@ import {
import { calcFieldCounts } from '../../utils/calc_field_counts';
import { FetchStatus, SidebarToggleState } from '../../../types';
import { DISCOVER_TOUR_STEP_ANCHOR_IDS } from '../../../../components/discover_tour';
-import { getUiActions } from '../../../../kibana_services';
import {
discoverSidebarReducer,
getInitialState,
@@ -331,14 +330,6 @@ export function DiscoverSidebarResponsive(props: DiscoverSidebarResponsiveProps)
[canEditDataView, dataViewEditor, setDataViewEditorRef, onDataViewCreated, closeFieldListFlyout]
);
- const fieldListSidebarServices: UnifiedFieldListSidebarContainerProps['services'] = useMemo(
- () => ({
- ...services,
- uiActions: getUiActions(),
- }),
- [services]
- );
-
const searchBarCustomization = useDiscoverCustomization('search_bar');
const fieldListCustomization = useDiscoverCustomization('field_list');
const CustomDataViewPicker = searchBarCustomization?.CustomDataViewPicker;
@@ -405,7 +396,7 @@ export function DiscoverSidebarResponsive(props: DiscoverSidebarResponsiveProps)
ref={initializeUnifiedFieldListSidebarContainerApi}
variant={fieldListVariant}
getCreationOptions={getCreationOptions}
- services={fieldListSidebarServices}
+ services={services}
dataView={selectedDataView}
trackUiMetric={trackUiMetric}
allFields={sidebarState.allFields}
diff --git a/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.test.tsx b/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.test.tsx
index 1212772f6d59..4626eafec936 100644
--- a/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.test.tsx
+++ b/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.test.tsx
@@ -11,7 +11,6 @@ import { mountWithIntl } from '@kbn/test-jest-helpers';
import { dataViewMock } from '@kbn/discover-utils/src/__mocks__';
import { DiscoverTopNav, DiscoverTopNavProps } from './discover_topnav';
import { TopNavMenu, TopNavMenuData } from '@kbn/navigation-plugin/public';
-import { setHeaderActionMenuMounter } from '../../../../kibana_services';
import { discoverServiceMock as mockDiscoverService } from '../../../../__mocks__/services';
import { getDiscoverStateMock } from '../../../../__mocks__/discover_state.mock';
import { DiscoverMainProvider } from '../../services/discover_state_provider';
@@ -20,8 +19,6 @@ import type { DiscoverCustomizationId } from '../../../../customizations/customi
import { useDiscoverCustomization } from '../../../../customizations';
import { useKibana } from '@kbn/kibana-react-plugin/public';
-setHeaderActionMenuMounter(jest.fn());
-
jest.mock('@kbn/kibana-react-plugin/public', () => ({
...jest.requireActual('@kbn/kibana-react-plugin/public'),
useKibana: jest.fn(),
diff --git a/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.tsx b/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.tsx
index 5c14592eff0c..0af9e4ab303a 100644
--- a/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.tsx
+++ b/src/plugins/discover/public/application/main/components/top_nav/discover_topnav.tsx
@@ -19,7 +19,6 @@ import {
} from '../../services/discover_state_provider';
import { useInternalStateSelector } from '../../services/discover_internal_state_container';
import { useDiscoverServices } from '../../../../hooks/use_discover_services';
-import { getHeaderActionMenuMounter } from '../../../../kibana_services';
import type { DiscoverStateContainer } from '../../services/discover_state';
import { onSaveSearch } from './on_save_search';
import { useDiscoverCustomization } from '../../../../customizations';
@@ -53,7 +52,15 @@ export const DiscoverTopNav = ({
onCancelClick,
}: DiscoverTopNavProps) => {
const services = useDiscoverServices();
- const { dataViewEditor, navigation, dataViewFieldEditor, data, uiSettings, dataViews } = services;
+ const {
+ dataViewEditor,
+ navigation,
+ dataViewFieldEditor,
+ data,
+ uiSettings,
+ dataViews,
+ setHeaderActionMenu,
+ } = services;
const query = useAppStateSelector((state) => state.query);
const adHocDataViews = useInternalStateSelector((state) => state.adHocDataViews);
const dataView = useInternalStateSelector((state) => state.dataView!);
@@ -164,7 +171,6 @@ export const DiscoverTopNav = ({
);
const { topNavBadges, topNavMenu } = useDiscoverTopNav({ stateContainer });
- const setMenuMountPoint = getHeaderActionMenuMounter();
const topNavProps = useMemo(() => {
if (stateContainer.customizationContext.inlineTopNav.enabled) {
return undefined;
@@ -173,10 +179,10 @@ export const DiscoverTopNav = ({
return {
badges: topNavBadges,
config: topNavMenu,
- setMenuMountPoint,
+ setMenuMountPoint: setHeaderActionMenu,
};
}, [
- setMenuMountPoint,
+ setHeaderActionMenu,
stateContainer.customizationContext.inlineTopNav.enabled,
topNavBadges,
topNavMenu,
diff --git a/src/plugins/discover/public/application/main/components/top_nav/on_save_search.tsx b/src/plugins/discover/public/application/main/components/top_nav/on_save_search.tsx
index 443a528e26e6..84c056f60ad0 100644
--- a/src/plugins/discover/public/application/main/components/top_nav/on_save_search.tsx
+++ b/src/plugins/discover/public/application/main/components/top_nav/on_save_search.tsx
@@ -284,7 +284,7 @@ const SaveSearchObjectModal: React.FC<{
managed
? i18n.translate('discover.localMenu.mustCopyOnSave', {
defaultMessage:
- 'This saved search is managed by Elastic. Changes here must be saved to a new saved search.',
+ 'Elastic manages this saved search. Save any changes to a new saved search.',
})
: undefined
}
diff --git a/src/plugins/discover/public/application/main/discover_main_app.test.tsx b/src/plugins/discover/public/application/main/discover_main_app.test.tsx
index 170f38e6fda3..43566c95a332 100644
--- a/src/plugins/discover/public/application/main/discover_main_app.test.tsx
+++ b/src/plugins/discover/public/application/main/discover_main_app.test.tsx
@@ -12,18 +12,13 @@ import { DataViewListItem } from '@kbn/data-views-plugin/public';
import { dataViewMock } from '@kbn/discover-utils/src/__mocks__';
import { DiscoverMainApp } from './discover_main_app';
import { DiscoverTopNav } from './components/top_nav/discover_topnav';
-import { setHeaderActionMenuMounter, setUrlTracker } from '../../kibana_services';
import { KibanaContextProvider } from '@kbn/kibana-react-plugin/public';
import { discoverServiceMock } from '../../__mocks__/services';
import { Router } from '@kbn/shared-ux-router';
import { createMemoryHistory } from 'history';
-import { urlTrackerMock } from '../../__mocks__/url_tracker.mock';
import { getDiscoverStateMock } from '../../__mocks__/discover_state.mock';
import { DiscoverMainProvider } from './services/discover_state_provider';
-setHeaderActionMenuMounter(jest.fn());
-setUrlTracker(urlTrackerMock);
-
discoverServiceMock.data.query.timefilter.timefilter.getTime = () => {
return { from: '2020-05-14T11:05:13.590', to: '2020-05-14T11:20:13.590' };
};
diff --git a/src/plugins/discover/public/application/main/discover_main_route.test.tsx b/src/plugins/discover/public/application/main/discover_main_route.test.tsx
index 06d42f818287..496bb91f92cf 100644
--- a/src/plugins/discover/public/application/main/discover_main_route.test.tsx
+++ b/src/plugins/discover/public/application/main/discover_main_route.test.tsx
@@ -8,14 +8,12 @@
import React from 'react';
import { mountWithIntl } from '@kbn/test-jest-helpers';
import { waitFor } from '@testing-library/react';
-import { setHeaderActionMenuMounter, setScopedHistory } from '../../kibana_services';
import { KibanaContextProvider } from '@kbn/kibana-react-plugin/public';
import { discoverServiceMock } from '../../__mocks__/services';
import { DiscoverMainRoute, MainRouteProps } from './discover_main_route';
import { MemoryRouter } from 'react-router-dom';
import { DiscoverMainApp } from './discover_main_app';
import { findTestSubject } from '@elastic/eui/lib/test';
-import { scopedHistoryMock } from '@kbn/core/public/mocks';
import {
createCustomizationService,
DiscoverCustomizationService,
@@ -42,8 +40,6 @@ jest.mock('./discover_main_app', () => {
};
});
-setScopedHistory(scopedHistoryMock.create());
-
describe('DiscoverMainRoute', () => {
beforeEach(() => {
mockCustomizationService = createCustomizationService();
@@ -112,7 +108,6 @@ describe('DiscoverMainRoute', () => {
const mountComponent = (hasESData = true, hasUserDataView = true) => {
const props: MainRouteProps = {
- isDev: false,
customizationCallbacks: [],
customizationContext: mockCustomizationContext,
};
@@ -136,5 +131,3 @@ function getServicesMock(hasESData = true, hasUserDataView = true) {
discoverServiceMock.core.http.get = jest.fn().mockResolvedValue({});
return discoverServiceMock;
}
-
-setHeaderActionMenuMounter(jest.fn());
diff --git a/src/plugins/discover/public/application/main/discover_main_route.tsx b/src/plugins/discover/public/application/main/discover_main_route.tsx
index 2bffb8d82a17..05263482662b 100644
--- a/src/plugins/discover/public/application/main/discover_main_route.tsx
+++ b/src/plugins/discover/public/application/main/discover_main_route.tsx
@@ -30,7 +30,6 @@ import { setBreadcrumbs } from '../../utils/breadcrumbs';
import { LoadingIndicator } from '../../components/common/loading_indicator';
import { DiscoverError } from '../../components/common/error_alert';
import { useDiscoverServices } from '../../hooks/use_discover_services';
-import { getScopedHistory, getUrlTracker } from '../../kibana_services';
import { useAlertResultsToast } from './hooks/use_alert_results_toast';
import { DiscoverMainProvider } from './services/discover_state_provider';
import {
@@ -52,7 +51,6 @@ interface DiscoverLandingParams {
export interface MainRouteProps {
customizationCallbacks: CustomizationCallback[];
stateStorageContainer?: IKbnUrlStateStorage;
- isDev: boolean;
customizationContext: DiscoverCustomizationContext;
}
@@ -71,6 +69,7 @@ export function DiscoverMainRoute({
http: { basePath },
dataViewEditor,
share,
+ getScopedHistory,
} = services;
const { id: savedSearchId } = useParams();
const [stateContainer, { reset: resetStateContainer }] = useDiscoverStateContainer({
@@ -96,8 +95,8 @@ export function DiscoverMainRoute({
* Get location state of scoped history only on initial load
*/
const historyLocationState = useMemo(
- () => getScopedHistory().location.state as MainHistoryLocationState | undefined,
- []
+ () => getScopedHistory()?.location.state,
+ [getScopedHistory]
);
useAlertResultsToast({
@@ -205,7 +204,7 @@ export function DiscoverMainRoute({
},
toastNotifications,
onBeforeRedirect() {
- getUrlTracker().setTrackedUrl('/');
+ services.urlTracker.setTrackedUrl('/');
},
theme: core.theme,
})(e);
diff --git a/src/plugins/discover/public/application/main/hooks/use_url_tracking.ts b/src/plugins/discover/public/application/main/hooks/use_url_tracking.ts
index 138ca8ce011d..88f69dceb44a 100644
--- a/src/plugins/discover/public/application/main/hooks/use_url_tracking.ts
+++ b/src/plugins/discover/public/application/main/hooks/use_url_tracking.ts
@@ -7,12 +7,14 @@
*/
import { useEffect } from 'react';
import { DiscoverSavedSearchContainer } from '../services/discover_saved_search_container';
-import { getUrlTracker } from '../../../kibana_services';
+import { useDiscoverServices } from '../../../hooks/use_discover_services';
/**
* Enable/disable kbn url tracking (That's the URL used when selecting Discover in the side menu)
*/
export function useUrlTracking(savedSearchContainer: DiscoverSavedSearchContainer) {
+ const { urlTracker } = useDiscoverServices();
+
useEffect(() => {
const subscription = savedSearchContainer.getCurrent$().subscribe((savedSearch) => {
const dataView = savedSearch.searchSource.getField('index');
@@ -20,11 +22,11 @@ export function useUrlTracking(savedSearchContainer: DiscoverSavedSearchContaine
return;
}
const trackingEnabled = Boolean(dataView.isPersisted() || savedSearch.id);
- getUrlTracker().setTrackingEnabled(trackingEnabled);
+ urlTracker.setTrackingEnabled(trackingEnabled);
});
return () => {
subscription.unsubscribe();
};
- }, [savedSearchContainer]);
+ }, [savedSearchContainer, urlTracker]);
}
diff --git a/src/plugins/discover/public/application/main/services/discover_data_state_container.test.ts b/src/plugins/discover/public/application/main/services/discover_data_state_container.test.ts
index 516d81cc9c3f..247a3a4d355a 100644
--- a/src/plugins/discover/public/application/main/services/discover_data_state_container.test.ts
+++ b/src/plugins/discover/public/application/main/services/discover_data_state_container.test.ts
@@ -12,8 +12,6 @@ import { dataViewMock, esHitsMockWithSort } from '@kbn/discover-utils/src/__mock
import { discoverServiceMock } from '../../../__mocks__/services';
import { savedSearchMockWithESQL } from '../../../__mocks__/saved_search';
import { FetchStatus } from '../../types';
-import { setUrlTracker } from '../../../kibana_services';
-import { urlTrackerMock } from '../../../__mocks__/url_tracker.mock';
import { DataDocuments$, RecordRawType } from './discover_data_state_container';
import { getDiscoverStateMock } from '../../../__mocks__/discover_state.mock';
import { fetchDocuments } from '../utils/fetch_documents';
@@ -28,7 +26,6 @@ jest.mock('@kbn/ebt-tools', () => ({
const mockFetchDocuments = fetchDocuments as unknown as jest.MockedFunction;
-setUrlTracker(urlTrackerMock);
describe('test getDataStateContainer', () => {
test('return is valid', async () => {
const stateContainer = getDiscoverStateMock({ isTimeBased: true });
diff --git a/src/plugins/discover/public/application/main/services/discover_state.ts b/src/plugins/discover/public/application/main/services/discover_state.ts
index aa6830008f5c..07db2d90857d 100644
--- a/src/plugins/discover/public/application/main/services/discover_state.ts
+++ b/src/plugins/discover/public/application/main/services/discover_state.ts
@@ -30,7 +30,6 @@ import { FetchStatus } from '../../types';
import { changeDataView } from '../hooks/utils/change_data_view';
import { buildStateSubscribe } from '../hooks/utils/build_state_subscribe';
import { addLog } from '../../../utils/add_log';
-import { getUrlTracker } from '../../../kibana_services';
import { DiscoverDataStateContainer, getDataStateContainer } from './discover_data_state_container';
import { DiscoverSearchSessionManager } from './discover_search_session';
import { DISCOVER_APP_LOCATOR, DiscoverAppLocatorParams } from '../../../../common';
@@ -307,12 +306,16 @@ export function getDiscoverStateContainer({
const newDataView = await services.dataViews.create({ ...prevDataView.toSpec(), id: uuidv4() });
services.dataViews.clearInstanceCache(prevDataView.id);
- updateFiltersReferences(prevDataView, newDataView);
+ updateFiltersReferences({
+ prevDataView,
+ nextDataView: newDataView,
+ services,
+ });
internalStateContainer.transitions.replaceAdHocDataViewWithId(prevDataView.id!, newDataView);
await appStateContainer.replaceUrlState({ index: newDataView.id });
const trackingEnabled = Boolean(newDataView.isPersisted() || savedSearchContainer.getId());
- getUrlTracker().setTrackingEnabled(trackingEnabled);
+ services.urlTracker.setTrackingEnabled(trackingEnabled);
return newDataView;
};
diff --git a/src/plugins/discover/public/application/main/utils/update_filter_references.ts b/src/plugins/discover/public/application/main/utils/update_filter_references.ts
index 8ab92d37a76f..2017e2d41ed9 100644
--- a/src/plugins/discover/public/application/main/utils/update_filter_references.ts
+++ b/src/plugins/discover/public/application/main/utils/update_filter_references.ts
@@ -12,10 +12,17 @@ import {
} from '@kbn/unified-search-plugin/public';
import { ActionExecutionContext } from '@kbn/ui-actions-plugin/public';
import type { DataView } from '@kbn/data-views-plugin/public';
-import { getUiActions } from '../../../kibana_services';
+import { DiscoverServices } from '../../../build_services';
-export const updateFiltersReferences = (prevDataView: DataView, nextDataView: DataView) => {
- const uiActions = getUiActions();
+export const updateFiltersReferences = ({
+ prevDataView,
+ nextDataView,
+ services: { uiActions },
+}: {
+ prevDataView: DataView;
+ nextDataView: DataView;
+ services: DiscoverServices;
+}) => {
const trigger = uiActions.getTrigger(UPDATE_FILTER_REFERENCES_TRIGGER);
const action = uiActions.getAction(UPDATE_FILTER_REFERENCES_ACTION);
action?.execute({
diff --git a/src/plugins/discover/public/application/not_found/not_found_route.tsx b/src/plugins/discover/public/application/not_found/not_found_route.tsx
index 4b2aa2b99022..90612394c40a 100644
--- a/src/plugins/discover/public/application/not_found/not_found_route.tsx
+++ b/src/plugins/discover/public/application/not_found/not_found_route.tsx
@@ -11,19 +11,18 @@ import { EuiCallOut } from '@elastic/eui';
import { FormattedMessage } from '@kbn/i18n-react';
import { Redirect } from 'react-router-dom';
import { toMountPoint } from '@kbn/react-kibana-mount';
-import { getUrlTracker } from '../../kibana_services';
import { useDiscoverServices } from '../../hooks/use_discover_services';
let bannerId: string | undefined;
export function NotFoundRoute() {
const services = useDiscoverServices();
- const { urlForwarding, core, history } = services;
- const currentLocation = history().location.pathname;
+ const { urlForwarding, urlTracker, core, history } = services;
+ const currentLocation = history.location.pathname;
useEffect(() => {
const path = window.location.hash.substr(1);
- getUrlTracker().restorePreviousUrl();
+ urlTracker.restorePreviousUrl();
urlForwarding.navigateToLegacyKibanaUrl(path);
const bannerMessage = i18n.translate('discover.noMatchRoute.bannerTitleText', {
@@ -39,7 +38,7 @@ export function NotFoundRoute() {
id="discover.noMatchRoute.bannerText"
defaultMessage="Discover application doesn't recognize this route: {route}"
values={{
- route: history().location.state.referrer,
+ route: history.location.state.referrer,
}}
/>
@@ -57,7 +56,7 @@ export function NotFoundRoute() {
core.overlays.banners.remove(bannerId);
}
}, 15000);
- }, [core, history, urlForwarding]);
+ }, [core, history, urlForwarding, urlTracker]);
return ;
}
diff --git a/src/plugins/discover/public/build_services.ts b/src/plugins/discover/public/build_services.ts
index da82df24e184..d40edd879288 100644
--- a/src/plugins/discover/public/build_services.ts
+++ b/src/plugins/discover/public/build_services.ts
@@ -20,6 +20,8 @@ import {
NotificationsStart,
ApplicationStart,
AnalyticsServiceStart,
+ AppMountParameters,
+ ScopedHistory,
} from '@kbn/core/public';
import {
FilterManager,
@@ -51,9 +53,8 @@ import type { LensPublicStart } from '@kbn/lens-plugin/public';
import type { UiActionsStart } from '@kbn/ui-actions-plugin/public';
import type { SettingsStart } from '@kbn/core-ui-settings-browser';
import type { ContentClient } from '@kbn/content-management-plugin/public';
-import { memoize } from 'lodash';
+import { memoize, noop } from 'lodash';
import type { NoDataPagePluginStart } from '@kbn/no-data-page-plugin/public';
-import { getHistory } from './kibana_services';
import { DiscoverStartPlugins } from './plugin';
import { DiscoverContextAppLocator } from './application/context/services/locator';
import { DiscoverSingleDocLocator } from './application/doc/locator';
@@ -66,6 +67,12 @@ export interface HistoryLocationState {
referrer: string;
}
+export interface UrlTracker {
+ setTrackedUrl: (url: string) => void;
+ restorePreviousUrl: () => void;
+ setTrackingEnabled: (value: boolean) => void;
+}
+
export interface DiscoverServices {
application: ApplicationStart;
addBasePath: (path: string) => string;
@@ -76,7 +83,9 @@ export interface DiscoverServices {
data: DataPublicPluginStart;
docLinks: DocLinksStart;
embeddable: EmbeddableStart;
- history: () => History;
+ history: History;
+ getScopedHistory: () => ScopedHistory | undefined;
+ setHeaderActionMenu: AppMountParameters['setHeaderActionMenu'];
theme: CoreStart['theme'];
filterManager: FilterManager;
fieldFormats: FieldFormatsStart;
@@ -86,6 +95,7 @@ export interface DiscoverServices {
navigation: NavigationPublicPluginStart;
share?: SharePluginStart;
urlForwarding: UrlForwardingStart;
+ urlTracker: UrlTracker;
timefilter: TimefilterContract;
toastNotifications: ToastsStart;
notifications: NotificationsStart;
@@ -113,63 +123,83 @@ export interface DiscoverServices {
noDataPage?: NoDataPagePluginStart;
}
-export const buildServices = memoize(function (
- core: CoreStart,
- plugins: DiscoverStartPlugins,
- context: PluginInitializerContext,
- locator: DiscoverAppLocator,
- contextLocator: DiscoverContextAppLocator,
- singleDocLocator: DiscoverSingleDocLocator
-): DiscoverServices {
- const { usageCollection } = plugins;
- const storage = new Storage(localStorage);
-
- return {
- application: core.application,
- addBasePath: core.http.basePath.prepend,
- analytics: core.analytics,
- capabilities: core.application.capabilities,
- chrome: core.chrome,
+export const buildServices = memoize(
+ ({
core,
- data: plugins.data,
- docLinks: core.docLinks,
- embeddable: plugins.embeddable,
- theme: core.theme,
- fieldFormats: plugins.fieldFormats,
- filterManager: plugins.data.query.filterManager,
- history: getHistory,
- dataViews: plugins.data.dataViews,
- inspector: plugins.inspector,
- metadata: {
- branch: context.env.packageInfo.branch,
- },
- navigation: plugins.navigation,
- share: plugins.share,
- urlForwarding: plugins.urlForwarding,
- timefilter: plugins.data.query.timefilter.timefilter,
- toastNotifications: core.notifications.toasts,
- notifications: core.notifications,
- uiSettings: core.uiSettings,
- settings: core.settings,
- storage,
- trackUiMetric: usageCollection?.reportUiCounter.bind(usageCollection, 'discover'),
- dataViewFieldEditor: plugins.dataViewFieldEditor,
- http: core.http,
- spaces: plugins.spaces,
- dataViewEditor: plugins.dataViewEditor,
- triggersActionsUi: plugins.triggersActionsUi,
+ plugins,
+ context,
locator,
contextLocator,
singleDocLocator,
- expressions: plugins.expressions,
- charts: plugins.charts,
- savedObjectsTagging: plugins.savedObjectsTaggingOss?.getTaggingApi(),
- savedObjectsManagement: plugins.savedObjectsManagement,
- savedSearch: plugins.savedSearch,
- unifiedSearch: plugins.unifiedSearch,
- lens: plugins.lens,
- uiActions: plugins.uiActions,
- contentClient: plugins.contentManagement.client,
- noDataPage: plugins.noDataPage,
- };
-});
+ history,
+ scopedHistory,
+ urlTracker,
+ setHeaderActionMenu = noop,
+ }: {
+ core: CoreStart;
+ plugins: DiscoverStartPlugins;
+ context: PluginInitializerContext;
+ locator: DiscoverAppLocator;
+ contextLocator: DiscoverContextAppLocator;
+ singleDocLocator: DiscoverSingleDocLocator;
+ history: History;
+ scopedHistory?: ScopedHistory;
+ urlTracker: UrlTracker;
+ setHeaderActionMenu?: AppMountParameters['setHeaderActionMenu'];
+ }): DiscoverServices => {
+ const { usageCollection } = plugins;
+ const storage = new Storage(localStorage);
+
+ return {
+ application: core.application,
+ addBasePath: core.http.basePath.prepend,
+ analytics: core.analytics,
+ capabilities: core.application.capabilities,
+ chrome: core.chrome,
+ core,
+ data: plugins.data,
+ docLinks: core.docLinks,
+ embeddable: plugins.embeddable,
+ theme: core.theme,
+ fieldFormats: plugins.fieldFormats,
+ filterManager: plugins.data.query.filterManager,
+ history,
+ getScopedHistory: () => scopedHistory as ScopedHistory,
+ setHeaderActionMenu,
+ dataViews: plugins.data.dataViews,
+ inspector: plugins.inspector,
+ metadata: {
+ branch: context.env.packageInfo.branch,
+ },
+ navigation: plugins.navigation,
+ share: plugins.share,
+ urlForwarding: plugins.urlForwarding,
+ urlTracker,
+ timefilter: plugins.data.query.timefilter.timefilter,
+ toastNotifications: core.notifications.toasts,
+ notifications: core.notifications,
+ uiSettings: core.uiSettings,
+ settings: core.settings,
+ storage,
+ trackUiMetric: usageCollection?.reportUiCounter.bind(usageCollection, 'discover'),
+ dataViewFieldEditor: plugins.dataViewFieldEditor,
+ http: core.http,
+ spaces: plugins.spaces,
+ dataViewEditor: plugins.dataViewEditor,
+ triggersActionsUi: plugins.triggersActionsUi,
+ locator,
+ contextLocator,
+ singleDocLocator,
+ expressions: plugins.expressions,
+ charts: plugins.charts,
+ savedObjectsTagging: plugins.savedObjectsTaggingOss?.getTaggingApi(),
+ savedObjectsManagement: plugins.savedObjectsManagement,
+ savedSearch: plugins.savedSearch,
+ unifiedSearch: plugins.unifiedSearch,
+ lens: plugins.lens,
+ uiActions: plugins.uiActions,
+ contentClient: plugins.contentManagement.client,
+ noDataPage: plugins.noDataPage,
+ };
+ }
+);
diff --git a/src/plugins/discover/public/components/discover_container/discover_container.test.tsx b/src/plugins/discover/public/components/discover_container/discover_container.test.tsx
index 708fc93e63b8..3dc04996c483 100644
--- a/src/plugins/discover/public/components/discover_container/discover_container.test.tsx
+++ b/src/plugins/discover/public/components/discover_container/discover_container.test.tsx
@@ -13,7 +13,6 @@ import {
DiscoverContainerInternal,
type DiscoverContainerInternalProps,
} from './discover_container';
-import type { ScopedHistory } from '@kbn/core-application-browser';
import { discoverServiceMock } from '../../__mocks__/services';
import { KibanaContextProvider } from '@kbn/kibana-react-plugin/public';
import { dataPluginMock } from '@kbn/data-plugin/public/mocks';
@@ -31,7 +30,7 @@ jest.mock('../../application/main', () => {
jest.mock('@kbn/kibana-react-plugin/public');
-const { history } = discoverServiceMock;
+const { getScopedHistory } = discoverServiceMock;
const customizeMock = jest.fn();
@@ -40,8 +39,7 @@ const TestComponent = (props: Partial) => {
)}
+ scopedHistory={props.scopedHistory ?? getScopedHistory()!}
getDiscoverServices={getDiscoverServicesMock}
/>
);
diff --git a/src/plugins/discover/public/components/discover_container/discover_container.tsx b/src/plugins/discover/public/components/discover_container/discover_container.tsx
index 7c345304b6f2..f9695f57f867 100644
--- a/src/plugins/discover/public/components/discover_container/discover_container.tsx
+++ b/src/plugins/discover/public/components/discover_container/discover_container.tsx
@@ -15,7 +15,6 @@ import type { IKbnUrlStateStorage } from '@kbn/kibana-utils-plugin/public';
import { DiscoverMainRoute } from '../../application/main';
import type { DiscoverServices } from '../../build_services';
import type { CustomizationCallback, DiscoverCustomizationContext } from '../../customizations';
-import { setHeaderActionMenuMounter, setScopedHistory } from '../../kibana_services';
import { LoadingIndicator } from '../common/loading_indicator';
export interface DiscoverContainerInternalProps {
@@ -30,7 +29,6 @@ export interface DiscoverContainerInternalProps {
scopedHistory: ScopedHistory;
customizationCallbacks: CustomizationCallback[];
stateStorageContainer?: IKbnUrlStateStorage;
- isDev: boolean;
isLoading?: boolean;
}
@@ -57,30 +55,27 @@ export const DiscoverContainerInternal = ({
overrideServices,
scopedHistory,
customizationCallbacks,
- isDev,
getDiscoverServices,
stateStorageContainer,
isLoading = false,
}: DiscoverContainerInternalProps) => {
- const [discoverServices, setDiscoverServices] = useState();
- const [initialized, setInitialized] = useState(false);
+ const [discoverServices, setDiscoverServices] = useState();
useEffect(() => {
- getDiscoverServices().then((svcs) => setDiscoverServices(svcs));
+ getDiscoverServices().then(setDiscoverServices);
}, [getDiscoverServices]);
- useEffect(() => {
- setScopedHistory(scopedHistory);
- setHeaderActionMenuMounter(() => {});
- setInitialized(true);
- }, [scopedHistory]);
-
- const services = useMemo(() => {
- if (!discoverServices) return;
- return { ...discoverServices, ...overrideServices };
- }, [discoverServices, overrideServices]);
+ const services = useMemo(() => {
+ return discoverServices
+ ? {
+ ...discoverServices,
+ ...overrideServices,
+ getScopedHistory: () => scopedHistory as ScopedHistory,
+ }
+ : undefined;
+ }, [discoverServices, overrideServices, scopedHistory]);
- if (!initialized || !services || isLoading) {
+ if (!services || isLoading) {
return (
@@ -103,7 +98,6 @@ export const DiscoverContainerInternal = ({
customizationCallbacks={customizationCallbacks}
customizationContext={customizationContext}
stateStorageContainer={stateStorageContainer}
- isDev={isDev}
/>
diff --git a/src/plugins/discover/public/components/discover_container/index.ts b/src/plugins/discover/public/components/discover_container/index.ts
index 0cc48d01dfaf..e6f0dcb16022 100644
--- a/src/plugins/discover/public/components/discover_container/index.ts
+++ b/src/plugins/discover/public/components/discover_container/index.ts
@@ -10,9 +10,6 @@ import { withSuspense } from '@kbn/shared-ux-utility';
import { lazy } from 'react';
import type { DiscoverContainerInternalProps } from './discover_container';
-export type DiscoverContainerProps = Omit<
- DiscoverContainerInternalProps,
- 'isDev' | 'getDiscoverServices'
->;
+export type DiscoverContainerProps = Omit;
export const DiscoverContainerInternal = withSuspense(lazy(() => import('./discover_container')));
diff --git a/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.test.tsx b/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.test.tsx
index d65bc83befa9..c004a3edd2e1 100644
--- a/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.test.tsx
+++ b/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.test.tsx
@@ -17,17 +17,16 @@ import { SavedSearch } from '@kbn/saved-search-plugin/public';
describe('SavedSearchURLConflictCallout', () => {
let spaces: ReturnType;
- let history: () => History;
+ let history: History;
beforeEach(() => {
spaces = spacesPluginMock.createStartContract();
spaces.ui.components.getLegacyUrlConflict = jest.fn().mockReturnValue('callout');
- history = () =>
- ({
- location: {
- search: '?_g=foo',
- },
- } as History);
+ history = {
+ location: {
+ search: '?_g=foo',
+ },
+ } as History;
});
test("should render URLConflictCallout in case of id's conflicts", () => {
diff --git a/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.ts b/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.ts
index 1fbb74d6130c..d74ce2a49a38 100644
--- a/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.ts
+++ b/src/plugins/discover/public/components/saved_search_url_conflict_callout/saved_search_url_conflict_callout.ts
@@ -14,7 +14,7 @@ import { getSavedSearchUrl, SavedSearch } from '@kbn/saved-search-plugin/public'
interface SavedSearchURLConflictCalloutProps {
savedSearch?: SavedSearch;
spaces?: SpacesApi;
- history: () => History;
+ history: History;
}
export const SavedSearchURLConflictCallout = ({
@@ -34,7 +34,7 @@ export const SavedSearchURLConflictCallout = ({
},
}),
currentObjectId: savedSearch.id,
- otherObjectPath: `${getSavedSearchUrl(otherObjectId)}${history().location.search}`,
+ otherObjectPath: `${getSavedSearchUrl(otherObjectId)}${history.location.search}`,
otherObjectId,
});
}
diff --git a/src/plugins/discover/public/customizations/profile_aware_locator.test.ts b/src/plugins/discover/public/customizations/profile_aware_locator.test.ts
index 7916710b4e27..d0ef7a526dac 100644
--- a/src/plugins/discover/public/customizations/profile_aware_locator.test.ts
+++ b/src/plugins/discover/public/customizations/profile_aware_locator.test.ts
@@ -6,30 +6,24 @@
* Side Public License, v 1.
*/
+import { History } from 'history';
import { addProfile } from '../../common/customizations';
+import { HistoryLocationState } from '../build_services';
import { ProfileAwareLocator } from './profile_aware_locator';
-let mockPathname: string | undefined;
-
-jest.mock('../kibana_services', () => {
- const originalModule = jest.requireActual('../kibana_services');
- return {
- ...originalModule,
- getHistory: jest.fn(() => ({
- location: {
- pathname: mockPathname,
- },
- })),
- };
-});
+let mockHistory: History;
describe('ProfileAwareLocator', () => {
beforeEach(() => {
- mockPathname = undefined;
+ mockHistory = {
+ location: {
+ pathname: '',
+ },
+ } as History;
});
it('should inject profile', async () => {
- mockPathname = addProfile('', 'test');
+ mockHistory.location.pathname = addProfile('', 'test');
const locator = {
id: 'test',
migrations: {},
@@ -43,7 +37,7 @@ describe('ProfileAwareLocator', () => {
inject: jest.fn(),
extract: jest.fn(),
};
- const profileAwareLocator = new ProfileAwareLocator(locator);
+ const profileAwareLocator = new ProfileAwareLocator(locator, mockHistory);
const params = { foo: 'bar' };
const injectedParams = { foo: 'bar', profile: 'test' };
await profileAwareLocator.getLocation(params);
@@ -69,7 +63,7 @@ describe('ProfileAwareLocator', () => {
});
it('should not overwrite the provided profile with an injected one', async () => {
- mockPathname = addProfile('', 'test');
+ mockHistory.location.pathname = addProfile('', 'test');
const locator = {
id: 'test',
migrations: {},
@@ -83,7 +77,7 @@ describe('ProfileAwareLocator', () => {
inject: jest.fn(),
extract: jest.fn(),
};
- const profileAwareLocator = new ProfileAwareLocator(locator);
+ const profileAwareLocator = new ProfileAwareLocator(locator, mockHistory);
const params = { foo: 'bar', profile: 'test2' };
await profileAwareLocator.getLocation(params);
expect(locator.getLocation).toHaveBeenCalledWith(params);
@@ -121,7 +115,7 @@ describe('ProfileAwareLocator', () => {
inject: jest.fn(),
extract: jest.fn(),
};
- const profileAwareLocator = new ProfileAwareLocator(locator);
+ const profileAwareLocator = new ProfileAwareLocator(locator, mockHistory);
const params = { foo: 'bar' };
await profileAwareLocator.getLocation(params);
expect(locator.getLocation).toHaveBeenCalledWith(params);
diff --git a/src/plugins/discover/public/customizations/profile_aware_locator.ts b/src/plugins/discover/public/customizations/profile_aware_locator.ts
index 44c14c4e99aa..5339a7c382aa 100644
--- a/src/plugins/discover/public/customizations/profile_aware_locator.ts
+++ b/src/plugins/discover/public/customizations/profile_aware_locator.ts
@@ -17,15 +17,19 @@ import type {
LocatorNavigationParams,
} from '@kbn/share-plugin/common/url_service';
import type { LocatorPublic } from '@kbn/share-plugin/public';
+import { History } from 'history';
import type { DependencyList } from 'react';
import { getProfile } from '../../common/customizations';
-import { getHistory } from '../kibana_services';
+import { HistoryLocationState } from '../build_services';
export class ProfileAwareLocator implements LocatorPublic {
id: string;
migrations: MigrateFunctionsObject | GetMigrationFunctionObjectFn;
- constructor(private readonly locator: LocatorPublic) {
+ constructor(
+ private readonly locator: LocatorPublic,
+ private readonly history: History
+ ) {
this.id = locator.id;
this.migrations = locator.migrations;
}
@@ -35,8 +39,7 @@ export class ProfileAwareLocator implements Loca
return params;
}
- const history = getHistory();
- const { profile } = getProfile(history.location.pathname);
+ const { profile } = getProfile(this.history.location.pathname);
if (profile) {
params = { ...params, profile };
diff --git a/src/plugins/discover/public/history_service.ts b/src/plugins/discover/public/history_service.ts
new file mode 100644
index 000000000000..b96746697913
--- /dev/null
+++ b/src/plugins/discover/public/history_service.ts
@@ -0,0 +1,41 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import { createHashHistory, History } from 'history';
+import { HistoryLocationState } from './build_services';
+
+export class HistoryService {
+ private history?: History;
+
+ /**
+ * Makes sure discover and context are using one instance of history.
+ */
+ getHistory() {
+ if (!this.history) {
+ this.history = createHashHistory();
+ this.history.listen(() => {
+ // keep at least one listener so that `history.location` always in sync
+ });
+ }
+
+ return this.history;
+ }
+
+ /**
+ * Discover currently uses two `history` instances: one from Kibana Platform and
+ * another from `history` package. Below function is used every time Discover
+ * app is loaded to synchronize both instances.
+ *
+ * This helper is temporary until https://github.com/elastic/kibana/issues/65161 is resolved.
+ */
+ syncHistoryLocations() {
+ const history = this.getHistory();
+ Object.assign(history.location, createHashHistory().location);
+ return history;
+ }
+}
diff --git a/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.test.ts b/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.test.ts
index 93f2c1be1ab6..e2ba306e57cb 100644
--- a/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.test.ts
+++ b/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.test.ts
@@ -16,16 +16,15 @@ import { spacesPluginMock } from '@kbn/spaces-plugin/public/mocks';
describe('useSavedSearchAliasMatchRedirect', () => {
let spaces: ReturnType;
- let history: () => History;
+ let history: History;
beforeEach(() => {
spaces = spacesPluginMock.createStartContract();
- history = () =>
- ({
- location: {
- search: '?_g=foo',
- },
- } as History);
+ history = {
+ location: {
+ search: '?_g=foo',
+ },
+ } as History;
});
test('should redirect in case of aliasMatch', () => {
diff --git a/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.ts b/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.ts
index 983701236e59..3f9ccda65b68 100644
--- a/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.ts
+++ b/src/plugins/discover/public/hooks/saved_search_alias_match_redirect.ts
@@ -15,7 +15,7 @@ import { getSavedSearchUrl, SavedSearch } from '@kbn/saved-search-plugin/public'
interface SavedSearchAliasMatchRedirectProps {
savedSearch?: SavedSearch;
spaces?: SpacesApi;
- history: () => History;
+ history: History;
}
export const useSavedSearchAliasMatchRedirect = ({
@@ -31,7 +31,7 @@ export const useSavedSearchAliasMatchRedirect = ({
if (spaces && aliasTargetId && outcome === 'aliasMatch') {
await spaces.ui.redirectLegacyUrl({
- path: `${getSavedSearchUrl(aliasTargetId)}${history().location.search}`,
+ path: `${getSavedSearchUrl(aliasTargetId)}${history.location.search}`,
aliasPurpose,
objectNoun: i18n.translate('discover.savedSearchAliasMatchRedirect.objectNoun', {
defaultMessage: '{savedSearch} search',
diff --git a/src/plugins/discover/public/kibana_services.ts b/src/plugins/discover/public/kibana_services.ts
deleted file mode 100644
index ebab3c97c0ce..000000000000
--- a/src/plugins/discover/public/kibana_services.ts
+++ /dev/null
@@ -1,56 +0,0 @@
-/*
- * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
- * or more contributor license agreements. Licensed under the Elastic License
- * 2.0 and the Server Side Public License, v 1; you may not use this file except
- * in compliance with, at your election, the Elastic License 2.0 or the Server
- * Side Public License, v 1.
- */
-
-import { once } from 'lodash';
-import { createHashHistory } from 'history';
-import type { ScopedHistory, AppMountParameters } from '@kbn/core/public';
-import type { UiActionsStart } from '@kbn/ui-actions-plugin/public';
-import { createGetterSetter } from '@kbn/kibana-utils-plugin/public';
-import { HistoryLocationState } from './build_services';
-
-let uiActions: UiActionsStart;
-export interface UrlTracker {
- setTrackedUrl: (url: string) => void;
- restorePreviousUrl: () => void;
- setTrackingEnabled: (value: boolean) => void;
-}
-
-export const setUiActions = (pluginUiActions: UiActionsStart) => (uiActions = pluginUiActions);
-export const getUiActions = () => uiActions;
-
-export const [getHeaderActionMenuMounter, setHeaderActionMenuMounter] =
- createGetterSetter('headerActionMenuMounter');
-
-export const [getUrlTracker, setUrlTracker] = createGetterSetter('urlTracker');
-
-/**
- * Makes sure discover and context are using one instance of history.
- */
-export const getHistory = once(() => {
- const history = createHashHistory();
- history.listen(() => {
- // keep at least one listener so that `history.location` always in sync
- });
- return history;
-});
-
-/**
- * Discover currently uses two `history` instances: one from Kibana Platform and
- * another from `history` package. Below function is used every time Discover
- * app is loaded to synchronize both instances.
- *
- * This helper is temporary until https://github.com/elastic/kibana/issues/65161 is resolved.
- */
-export const syncHistoryLocations = () => {
- const h = getHistory();
- Object.assign(h.location, createHashHistory().location);
- return h;
-};
-
-export const [getScopedHistory, setScopedHistory] =
- createGetterSetter('scopedHistory');
diff --git a/src/plugins/discover/public/plugin.tsx b/src/plugins/discover/public/plugin.tsx
index 6441b30a06ec..a862c7844637 100644
--- a/src/plugins/discover/public/plugin.tsx
+++ b/src/plugins/discover/public/plugin.tsx
@@ -15,6 +15,7 @@ import {
CoreStart,
Plugin,
PluginInitializerContext,
+ ScopedHistory,
} from '@kbn/core/public';
import { UiActionsSetup, UiActionsStart } from '@kbn/ui-actions-plugin/public';
import { ExpressionsSetup, ExpressionsStart } from '@kbn/expressions-plugin/public';
@@ -46,15 +47,8 @@ import type { LensPublicStart } from '@kbn/lens-plugin/public';
import { TRUNCATE_MAX_HEIGHT, ENABLE_ESQL } from '@kbn/discover-utils';
import type { NoDataPagePluginStart } from '@kbn/no-data-page-plugin/public';
import { PLUGIN_ID } from '../common';
-import {
- setHeaderActionMenuMounter,
- setScopedHistory,
- setUiActions,
- setUrlTracker,
- syncHistoryLocations,
-} from './kibana_services';
import { registerFeature } from './register_feature';
-import { buildServices } from './build_services';
+import { buildServices, UrlTracker } from './build_services';
import { SearchEmbeddableFactory } from './embeddable';
import { ViewSavedSearchAction } from './embeddable/view_saved_search_action';
import { injectTruncateStyles } from './utils/truncate_styles';
@@ -83,6 +77,7 @@ import {
type DiscoverContainerProps,
} from './components/discover_container';
import { getESQLSearchProvider } from './global_search/search_provider';
+import { HistoryService } from './history_service';
/**
* @public
@@ -215,6 +210,9 @@ export class DiscoverPlugin
constructor(private readonly initializerContext: PluginInitializerContext) {}
private appStateUpdater = new BehaviorSubject(() => ({}));
+ private historyService = new HistoryService();
+ private scopedHistory?: ScopedHistory;
+ private urlTracker?: UrlTracker;
private stopUrlTracking: (() => void) | undefined = undefined;
private profileRegistry = createProfileRegistry();
private locator?: DiscoverAppLocator;
@@ -230,7 +228,6 @@ export class DiscoverPlugin
plugins: DiscoverSetupPlugins
): DiscoverSetup {
const baseUrl = core.http.basePath.prepend('/app/discover');
- const isDev = this.initializerContext.env.mode.dev;
if (plugins.share) {
const useHash = core.uiSettings.get('state:storeInSessionStorage');
@@ -275,11 +272,16 @@ export class DiscoverPlugin
appMounted,
appUnMounted,
setTrackingEnabled,
- } = initializeKbnUrlTracking(baseUrl, core, this.appStateUpdater, plugins);
- setUrlTracker({ setTrackedUrl, restorePreviousUrl, setTrackingEnabled });
- this.stopUrlTracking = () => {
- stopUrlTracker();
- };
+ } = initializeKbnUrlTracking({
+ baseUrl,
+ core,
+ navLinkUpdater$: this.appStateUpdater,
+ plugins,
+ getScopedHistory: () => this.scopedHistory!,
+ });
+
+ this.urlTracker = { setTrackedUrl, restorePreviousUrl, setTrackingEnabled };
+ this.stopUrlTracking = stopUrlTracker;
const appStateUpdater$ = combineLatest([
this.appStateUpdater,
@@ -305,31 +307,37 @@ export class DiscoverPlugin
visibleIn: ['globalSearch', 'sideNav', 'kibanaOverview'],
mount: async (params: AppMountParameters) => {
const [coreStart, discoverStartPlugins] = await core.getStartServices();
- setScopedHistory(params.history);
- setHeaderActionMenuMounter(params.setHeaderActionMenu);
- syncHistoryLocations();
+
+ // Store the current scoped history so initializeKbnUrlTracking can access it
+ this.scopedHistory = params.history;
+
+ this.historyService.syncHistoryLocations();
appMounted();
// dispatch synthetic hash change event to update hash history objects
// this is necessary because hash updates triggered by using popState won't trigger this event naturally.
- const unlistenParentHistory = params.history.listen(() => {
+ const unlistenParentHistory = this.scopedHistory.listen(() => {
window.dispatchEvent(new HashChangeEvent('hashchange'));
});
- const { locator, contextLocator, singleDocLocator } = await getProfileAwareLocators({
+ const { locator, contextLocator, singleDocLocator } = await this.getProfileAwareLocators({
locator: this.locator!,
contextLocator: this.contextLocator!,
singleDocLocator: this.singleDocLocator!,
});
- const services = buildServices(
- coreStart,
- discoverStartPlugins,
- this.initializerContext,
+ const services = buildServices({
+ core: coreStart,
+ plugins: discoverStartPlugins,
+ context: this.initializerContext,
locator,
contextLocator,
- singleDocLocator
- );
+ singleDocLocator,
+ history: this.historyService.getHistory(),
+ scopedHistory: this.scopedHistory,
+ urlTracker: this.urlTracker!,
+ setHeaderActionMenu: params.setHeaderActionMenu,
+ });
// make sure the data view list is up to date
discoverStartPlugins.dataViews.clearCache();
@@ -347,7 +355,6 @@ export class DiscoverPlugin
displayMode: 'standalone',
inlineTopNav: this.inlineTopNav,
},
- isDev,
});
return () => {
@@ -405,10 +412,8 @@ export class DiscoverPlugin
plugins.uiActions.addTriggerAction('CONTEXT_MENU_TRIGGER', viewSavedSearchAction);
plugins.uiActions.registerTrigger(SEARCH_EMBEDDABLE_CELL_ACTIONS_TRIGGER);
- setUiActions(plugins.uiActions);
injectTruncateStyles(core.uiSettings.get(TRUNCATE_MAX_HEIGHT));
- const isDev = this.initializerContext.env.mode.dev;
const getDiscoverServicesInternal = () => {
return this.getDiscoverServices(core, plugins);
};
@@ -426,15 +431,9 @@ export class DiscoverPlugin
return {
locator: this.locator,
- DiscoverContainer: (props: DiscoverContainerProps) => {
- return (
-
- );
- },
+ DiscoverContainer: (props: DiscoverContainerProps) => (
+
+ ),
registerCustomizationProfile: createRegisterCustomizationProfile(this.profileRegistry),
};
}
@@ -446,22 +445,46 @@ export class DiscoverPlugin
}
private getDiscoverServices = async (core: CoreStart, plugins: DiscoverStartPlugins) => {
- const { locator, contextLocator, singleDocLocator } = await getProfileAwareLocators({
+ const { locator, contextLocator, singleDocLocator } = await this.getProfileAwareLocators({
locator: this.locator!,
contextLocator: this.contextLocator!,
singleDocLocator: this.singleDocLocator!,
});
- return buildServices(
+ return buildServices({
core,
plugins,
- this.initializerContext,
+ context: this.initializerContext,
locator,
contextLocator,
- singleDocLocator
- );
+ singleDocLocator,
+ history: this.historyService.getHistory(),
+ urlTracker: this.urlTracker!,
+ });
};
+ /**
+ * Create profile-aware locators for internal use
+ */
+ private async getProfileAwareLocators({
+ locator,
+ contextLocator,
+ singleDocLocator,
+ }: {
+ locator: DiscoverAppLocator;
+ contextLocator: DiscoverContextAppLocator;
+ singleDocLocator: DiscoverSingleDocLocator;
+ }) {
+ const { ProfileAwareLocator } = await import('./customizations/profile_aware_locator');
+ const history = this.historyService.getHistory();
+
+ return {
+ locator: new ProfileAwareLocator(locator, history),
+ contextLocator: new ProfileAwareLocator(contextLocator, history),
+ singleDocLocator: new ProfileAwareLocator(singleDocLocator, history),
+ };
+ }
+
private registerEmbeddable(core: CoreSetup, plugins: DiscoverSetupPlugins) {
const getStartServices = async () => {
const [coreStart, deps] = await core.getStartServices();
@@ -480,24 +503,3 @@ export class DiscoverPlugin
plugins.embeddable.registerEmbeddableFactory(factory.type, factory);
}
}
-
-/**
- * Create profile-aware locators for internal use
- */
-const getProfileAwareLocators = async ({
- locator,
- contextLocator,
- singleDocLocator,
-}: {
- locator: DiscoverAppLocator;
- contextLocator: DiscoverContextAppLocator;
- singleDocLocator: DiscoverSingleDocLocator;
-}) => {
- const { ProfileAwareLocator } = await import('./customizations/profile_aware_locator');
-
- return {
- locator: new ProfileAwareLocator(locator),
- contextLocator: new ProfileAwareLocator(contextLocator),
- singleDocLocator: new ProfileAwareLocator(singleDocLocator),
- };
-};
diff --git a/src/plugins/discover/public/utils/breadcrumbs.test.ts b/src/plugins/discover/public/utils/breadcrumbs.test.ts
index da76998020e5..22c87cd4b50a 100644
--- a/src/plugins/discover/public/utils/breadcrumbs.test.ts
+++ b/src/plugins/discover/public/utils/breadcrumbs.test.ts
@@ -43,14 +43,12 @@ describe('Breadcrumbs', () => {
});
test('should set breadcrumbs with profile root path', () => {
+ const history = createMemoryHistory({});
+ history.push('/p/my-profile');
setBreadcrumbs({
services: {
...discoverServiceMock,
- history: () => {
- const history = createMemoryHistory({});
- history.push('/p/my-profile');
- return history;
- },
+ history,
},
titleBreadcrumbText: 'Saved Search',
});
diff --git a/src/plugins/discover/public/utils/breadcrumbs.ts b/src/plugins/discover/public/utils/breadcrumbs.ts
index 217fb7d4c00f..c260077e24f9 100644
--- a/src/plugins/discover/public/utils/breadcrumbs.ts
+++ b/src/plugins/discover/public/utils/breadcrumbs.ts
@@ -14,7 +14,7 @@ import type { DiscoverServices } from '../build_services';
const rootPath = '#/';
const getRootPath = ({ history }: DiscoverServices) => {
- const { profile } = getProfile(history().location.pathname);
+ const { profile } = getProfile(history.location.pathname);
return profile ? addProfile(rootPath, profile) : rootPath;
};
diff --git a/src/plugins/discover/public/utils/initialize_kbn_url_tracking.test.ts b/src/plugins/discover/public/utils/initialize_kbn_url_tracking.test.ts
index 3c508f76cfe4..e4a9a3edf6f6 100644
--- a/src/plugins/discover/public/utils/initialize_kbn_url_tracking.test.ts
+++ b/src/plugins/discover/public/utils/initialize_kbn_url_tracking.test.ts
@@ -7,7 +7,7 @@
*/
import { AppUpdater } from '@kbn/core/public';
import { BehaviorSubject, Observable } from 'rxjs';
-import { coreMock } from '@kbn/core/public/mocks';
+import { coreMock, scopedHistoryMock } from '@kbn/core/public/mocks';
import { DiscoverSetupPlugins } from '../plugin';
import { initializeKbnUrlTracking } from './initialize_kbn_url_tracking';
@@ -20,12 +20,13 @@ describe('initializeKbnUrlTracking', () => {
},
},
} as DiscoverSetupPlugins;
- const result = initializeKbnUrlTracking(
- '',
- coreMock.createSetup(),
- new BehaviorSubject(() => ({})),
- pluginsSetup
- );
+ const result = initializeKbnUrlTracking({
+ baseUrl: '',
+ core: coreMock.createSetup(),
+ navLinkUpdater$: new BehaviorSubject(() => ({})),
+ plugins: pluginsSetup,
+ getScopedHistory: () => scopedHistoryMock.create(),
+ });
expect(result).toMatchInlineSnapshot(`
Object {
"appMounted": [Function],
diff --git a/src/plugins/discover/public/utils/initialize_kbn_url_tracking.ts b/src/plugins/discover/public/utils/initialize_kbn_url_tracking.ts
index 4fdb1fa9742c..8ec6a0f0dfa3 100644
--- a/src/plugins/discover/public/utils/initialize_kbn_url_tracking.ts
+++ b/src/plugins/discover/public/utils/initialize_kbn_url_tracking.ts
@@ -5,40 +5,45 @@
* in compliance with, at your election, the Elastic License 2.0 or the Server
* Side Public License, v 1.
*/
-import { AppUpdater, CoreSetup } from '@kbn/core/public';
+import { AppUpdater, CoreSetup, ScopedHistory } from '@kbn/core/public';
import type { BehaviorSubject } from 'rxjs';
import { filter, map } from 'rxjs/operators';
-import { createGetterSetter, createKbnUrlTracker } from '@kbn/kibana-utils-plugin/public';
+import { createKbnUrlTracker } from '@kbn/kibana-utils-plugin/public';
import { replaceUrlHashQuery } from '@kbn/kibana-utils-plugin/common';
import { isFilterPinned } from '@kbn/es-query';
-import { getScopedHistory } from '../kibana_services';
import { SEARCH_SESSION_ID_QUERY_PARAM } from '../constants';
import type { DiscoverSetupPlugins } from '../plugin';
-/**
- * Store the setting of enabling / disabling url
- * it's should be disabled for ad-hoc data views to omit error messages
- * - When you've added an ad hoc data view in Discover
- * - Continued your work in different parts of Kibana
- * - You've closed the Kibana tab
- */
-export const [getUrlTracking, setUrlTracking] = createGetterSetter<{
- enabled: boolean;
-}>('urlTrackingEnabled');
/**
* It creates the kbn url tracker for Discover to listens to history changes and optionally to global state
* changes and updates the nav link url of to point to the last visited page
*/
-export function initializeKbnUrlTracking(
- baseUrl: string,
- core: CoreSetup,
- navLinkUpdater$: BehaviorSubject,
- plugins: DiscoverSetupPlugins
-) {
- setUrlTracking({ enabled: true });
+export function initializeKbnUrlTracking({
+ baseUrl,
+ core,
+ navLinkUpdater$,
+ plugins,
+ getScopedHistory,
+}: {
+ baseUrl: string;
+ core: CoreSetup;
+ navLinkUpdater$: BehaviorSubject;
+ plugins: DiscoverSetupPlugins;
+ getScopedHistory: () => ScopedHistory;
+}) {
+ /**
+ * Store the setting of enabling / disabling url
+ * it's should be disabled for ad-hoc data views to omit error messages
+ * - When you've added an ad hoc data view in Discover
+ * - Continued your work in different parts of Kibana
+ * - You've closed the Kibana tab
+ */
+ let urlTrackingEnabled = true;
+
const setTrackingEnabled = (value: boolean) => {
- setUrlTracking({ enabled: value });
+ urlTrackingEnabled = value;
};
+
const {
appMounted,
appUnMounted,
@@ -70,7 +75,7 @@ export function initializeKbnUrlTracking(
},
],
shouldTrackUrlUpdate: () => {
- return getUrlTracking().enabled;
+ return urlTrackingEnabled;
},
onBeforeNavLinkSaved: (newNavLink: string) => {
// Do not save SEARCH_SESSION_ID into nav link, because of possible edge cases
@@ -86,6 +91,7 @@ export function initializeKbnUrlTracking(
return newNavLink;
},
});
+
return {
appMounted,
appUnMounted,
diff --git a/src/plugins/discover/tsconfig.json b/src/plugins/discover/tsconfig.json
index 3ca07c8ac348..4e6213e74579 100644
--- a/src/plugins/discover/tsconfig.json
+++ b/src/plugins/discover/tsconfig.json
@@ -60,7 +60,6 @@
"@kbn/core-saved-objects-api-server",
"@kbn/cell-actions",
"@kbn/shared-ux-utility",
- "@kbn/core-application-browser",
"@kbn/core-saved-objects-server",
"@kbn/discover-utils",
"@kbn/search-errors",
diff --git a/src/plugins/embeddable/public/add_panel_flyout/add_panel_flyout.tsx b/src/plugins/embeddable/public/add_panel_flyout/add_panel_flyout.tsx
index a407fb025e2c..b0bdcdbf6a91 100644
--- a/src/plugins/embeddable/public/add_panel_flyout/add_panel_flyout.tsx
+++ b/src/plugins/embeddable/public/add_panel_flyout/add_panel_flyout.tsx
@@ -159,7 +159,7 @@ export const AddPanelFlyout = ({
return item.managed
? i18n.translate('embeddableApi.addPanel.managedPanelTooltip', {
defaultMessage:
- 'This panel is managed by Elastic. It can be added but will be unlinked from the library.',
+ 'Elastic manages this panel. Adding it to a dashboard unlinks it from the library.',
})
: undefined;
}}
diff --git a/src/plugins/embeddable/public/embeddable_panel/embeddable_panel.tsx b/src/plugins/embeddable/public/embeddable_panel/embeddable_panel.tsx
index e98acc44e61e..01a63f6171d9 100644
--- a/src/plugins/embeddable/public/embeddable_panel/embeddable_panel.tsx
+++ b/src/plugins/embeddable/public/embeddable_panel/embeddable_panel.tsx
@@ -10,17 +10,21 @@ import { css } from '@emotion/react';
import { PresentationPanel } from '@kbn/presentation-panel-plugin/public';
import { PanelCompatibleComponent } from '@kbn/presentation-panel-plugin/public/panel_component/types';
import { isPromise } from '@kbn/std';
-import React, { ReactNode, useEffect, useImperativeHandle, useMemo, useState } from 'react';
+import React, { ReactNode, useEffect, useImperativeHandle, useMemo, useState, useRef } from 'react';
import { untilPluginStartServicesReady } from '../kibana_services';
import { EmbeddablePanelProps } from './types';
const getComponentFromEmbeddable = async (
- embeddable: EmbeddablePanelProps['embeddable']
-): Promise => {
+ embeddable: EmbeddablePanelProps['embeddable'],
+ isMounted: () => boolean
+): Promise => {
const startServicesPromise = untilPluginStartServicesReady();
const embeddablePromise =
typeof embeddable === 'function' ? embeddable() : Promise.resolve(embeddable);
const [, unwrappedEmbeddable] = await Promise.all([startServicesPromise, embeddablePromise]);
+ if (!isMounted()) {
+ return null;
+ }
if (unwrappedEmbeddable.parent) {
await unwrappedEmbeddable.parent.untilEmbeddableLoaded(unwrappedEmbeddable.id);
}
@@ -55,9 +59,33 @@ const getComponentFromEmbeddable = async (
/**
* Loads and renders a legacy embeddable.
+ *
+ * Ancestry chain must use 'key' attribute to reset DOM and state when embeddable changes
+ * For example
*/
export const EmbeddablePanel = (props: EmbeddablePanelProps) => {
+ // can not use useMountedState
+ // 1. useMountedState defaults mountedRef to false and sets mountedRef to true in useEffect
+ // 2. embeddable can be an object or a function that returns a promise
+ // 3. when embeddable is an object, Promise.resolve(embeddable) returns before
+ // useMountedState useEffect is called and thus isMounted() returns false when component has not been unmounted
+ const mountedRef = useRef(true);
+ useEffect(() => {
+ return () => {
+ mountedRef.current = false;
+ };
+ }, []);
+ const isMounted = () => {
+ return mountedRef.current;
+ };
const { embeddable, ...passThroughProps } = props;
- const componentPromise = useMemo(() => getComponentFromEmbeddable(embeddable), [embeddable]);
+ const componentPromise = useMemo(
+ () => getComponentFromEmbeddable(embeddable, isMounted),
+ // Ancestry chain is expected to use 'key' attribute to reset DOM and state
+ // when embeddable needs to be re-loaded
+ // empty array is consistent with PresentationPanel useAsync dependency check
+ // eslint-disable-next-line react-hooks/exhaustive-deps
+ []
+ );
return ;
};
diff --git a/src/plugins/presentation_panel/public/panel_component/presentation_panel.tsx b/src/plugins/presentation_panel/public/panel_component/presentation_panel.tsx
index 561fefe8d1ec..afc7714ea022 100644
--- a/src/plugins/presentation_panel/public/panel_component/presentation_panel.tsx
+++ b/src/plugins/presentation_panel/public/panel_component/presentation_panel.tsx
@@ -36,6 +36,8 @@ export const PresentationPanel = <
]);
const Panel = panelModule.PresentationPanelInternal;
return { Panel, unwrappedComponent };
+ // Ancestry chain is expected to use 'key' attribute to reset DOM and state
+ // when unwrappedComponent needs to be re-loaded
}, []);
if (error || (!loading && (!value?.Panel || !value?.unwrappedComponent))) {
diff --git a/src/plugins/presentation_panel/public/panel_component/types.ts b/src/plugins/presentation_panel/public/panel_component/types.ts
index 654626e5959d..aaee39d43939 100644
--- a/src/plugins/presentation_panel/public/panel_component/types.ts
+++ b/src/plugins/presentation_panel/public/panel_component/types.ts
@@ -77,5 +77,5 @@ export type PresentationPanelProps<
ApiType extends DefaultPresentationPanelApi = DefaultPresentationPanelApi,
PropsType extends {} = {}
> = Omit, 'Component'> & {
- Component: MaybePromise>;
+ Component: MaybePromise | null>;
};
diff --git a/src/plugins/presentation_util/public/components/floating_actions/floating_actions.tsx b/src/plugins/presentation_util/public/components/floating_actions/floating_actions.tsx
index be0e6ef1054f..7cb462a5f1de 100644
--- a/src/plugins/presentation_util/public/components/floating_actions/floating_actions.tsx
+++ b/src/plugins/presentation_util/public/components/floating_actions/floating_actions.tsx
@@ -5,15 +5,15 @@
* in compliance with, at your election, the Elastic License 2.0 or the Server
* Side Public License, v 1.
*/
-import React, { FC, ReactElement, useEffect, useState } from 'react';
import classNames from 'classnames';
+import React, { FC, ReactElement, useEffect, useState } from 'react';
import {
- type ViewMode,
- type IEmbeddable,
- type EmbeddableInput,
panelHoverTrigger,
PANEL_HOVER_TRIGGER,
+ type EmbeddableInput,
+ type IEmbeddable,
+ type ViewMode,
} from '@kbn/embeddable-plugin/public';
import { Action } from '@kbn/ui-actions-plugin/public';
@@ -41,13 +41,13 @@ export const FloatingActions: FC = ({
const {
uiActions: { getTriggerCompatibleActions },
} = pluginServices.getServices();
-
const [floatingActions, setFloatingActions] = useState(undefined);
useEffect(() => {
if (!embeddable) return;
const getActions = async () => {
+ let mounted = true;
const context = {
embeddable,
trigger: panelHoverTrigger,
@@ -57,6 +57,8 @@ export const FloatingActions: FC = ({
return action.MenuItem !== undefined && (disabledActions ?? []).indexOf(action.id) === -1;
})
.sort((a, b) => (a.order || 0) - (b.order || 0));
+
+ if (!mounted) return;
if (actions.length > 0) {
setFloatingActions(
<>
@@ -71,6 +73,9 @@ export const FloatingActions: FC = ({
} else {
setFloatingActions(undefined);
}
+ return () => {
+ mounted = false;
+ };
};
getActions();
@@ -80,7 +85,10 @@ export const FloatingActions: FC = ({
{children}
{isEnabled && floatingActions && (
-
+
{floatingActions}
)}
diff --git a/src/plugins/saved_objects_management/public/management_section/objects_table/components/__snapshots__/table.test.tsx.snap b/src/plugins/saved_objects_management/public/management_section/objects_table/components/__snapshots__/table.test.tsx.snap
index 39bd053c069b..06893662c845 100644
--- a/src/plugins/saved_objects_management/public/management_section/objects_table/components/__snapshots__/table.test.tsx.snap
+++ b/src/plugins/saved_objects_management/public/management_section/objects_table/components/__snapshots__/table.test.tsx.snap
@@ -26,20 +26,33 @@ exports[`Table prevents saved objects from being deleted 1`] = `
onChange={[Function]}
toolsRight={
Array [
-
+ }
+ delay="regular"
+ display="inlineBlock"
+ position="top"
>
-
- ,
+
+
+
+ ,
+ }
+ delay="regular"
+ display="inlineBlock"
+ position="top"
>
-
- ,
+
+
+
+ ,
{
onChange={this.onChange}
defaultQuery={this.props.initialQuery}
toolsRight={[
- !managed && !hiddenType
- ).length === 0 || !capabilities.savedObjectsManagement.delete
- }
- title={
- capabilities.savedObjectsManagement.delete
- ? undefined
- : i18n.translate('savedObjectsManagement.objectsTable.table.deleteButtonTitle', {
- defaultMessage: 'Unable to delete saved objects',
- })
+
}
- data-test-subj="savedObjectsManagementDelete"
>
-
- ,
+ !managed && !hiddenType
+ ).length === 0 || !capabilities.savedObjectsManagement.delete
+ }
+ title={
+ capabilities.savedObjectsManagement.delete
+ ? undefined
+ : i18n.translate(
+ 'savedObjectsManagement.objectsTable.table.deleteButtonTitle',
+ {
+ defaultMessage: 'Unable to delete saved objects',
+ }
+ )
+ }
+ data-test-subj="savedObjectsManagementDelete"
+ >
+
+
+ ,
"`;
-exports[`VisLegend Component Legend open should match the snapshot 1`] = `"
"`;
+exports[`VisLegend Component Legend open should match the snapshot 1`] = `"
"`;
diff --git a/src/plugins/visualizations/public/actions/edit_in_lens_action.tsx b/src/plugins/visualizations/public/actions/edit_in_lens_action.tsx
index 2efe612e433c..10f2c26de417 100644
--- a/src/plugins/visualizations/public/actions/edit_in_lens_action.tsx
+++ b/src/plugins/visualizations/public/actions/edit_in_lens_action.tsx
@@ -6,31 +6,41 @@
* Side Public License, v 1.
*/
-import React from 'react';
-import { take } from 'rxjs/operators';
-import { EuiFlexGroup, EuiFlexItem, EuiBadge } from '@elastic/eui';
+import { EuiBadge, EuiFlexGroup, EuiFlexItem } from '@elastic/eui';
import { METRIC_TYPE } from '@kbn/analytics';
-import { ActionExecutionContext } from '@kbn/ui-actions-plugin/public';
import { TimefilterContract } from '@kbn/data-plugin/public';
+import { ViewMode } from '@kbn/embeddable-plugin/public';
import { i18n } from '@kbn/i18n';
-import { IEmbeddable, ViewMode } from '@kbn/embeddable-plugin/public';
+import {
+ apiCanAccessViewMode,
+ apiHasUniqueId,
+ CanAccessViewMode,
+ EmbeddableApiContext,
+ getInheritedViewMode,
+ HasUniqueId,
+ PublishesLocalUnifiedSearch,
+ PublishesPanelDescription,
+ PublishesPanelTitle,
+} from '@kbn/presentation-publishing';
import { Action } from '@kbn/ui-actions-plugin/public';
-import { VisualizeEmbeddable } from '../embeddable';
-import { DASHBOARD_VISUALIZATION_PANEL_TRIGGER } from '../triggers';
+import React from 'react';
+import { take } from 'rxjs/operators';
+import { apiHasVisualizeConfig, HasVisualizeConfig } from '../embeddable';
+import {
+ apiHasExpressionVariables,
+ HasExpressionVariables,
+} from '../embeddable/interfaces/has_expression_variables';
import {
- getUiActions,
getApplication,
+ getCapabilities,
getEmbeddable,
+ getUiActions,
getUsageCollection,
- getCapabilities,
} from '../services';
+import { DASHBOARD_VISUALIZATION_PANEL_TRIGGER } from '../triggers';
export const ACTION_EDIT_IN_LENS = 'ACTION_EDIT_IN_LENS';
-export interface EditInLensContext {
- embeddable: IEmbeddable;
-}
-
const displayName = i18n.translate('visualizations.actions.editInLens.displayName', {
defaultMessage: 'Convert to Lens',
});
@@ -50,11 +60,20 @@ const MenuItem: React.FC = () => {
);
};
-const isVisualizeEmbeddable = (embeddable: IEmbeddable): embeddable is VisualizeEmbeddable => {
- return 'getVis' in embeddable;
-};
+type EditInLensActionApi = HasUniqueId &
+ HasVisualizeConfig &
+ CanAccessViewMode &
+ Partial<
+ PublishesLocalUnifiedSearch &
+ HasExpressionVariables &
+ PublishesPanelTitle &
+ PublishesPanelDescription
+ >;
+
+const compatibilityCheck = (api: EmbeddableApiContext['embeddable']): api is EditInLensActionApi =>
+ apiHasUniqueId(api) && apiCanAccessViewMode(api) && apiHasVisualizeConfig(api);
-export class EditInLensAction implements Action
{
+export class EditInLensAction implements Action {
public id = ACTION_EDIT_IN_LENS;
public readonly type = ACTION_EDIT_IN_LENS;
public order = 49;
@@ -63,7 +82,7 @@ export class EditInLensAction implements Action {
constructor(private readonly timefilter: TimefilterContract) {}
- async execute(context: ActionExecutionContext): Promise {
+ async execute(context: EmbeddableApiContext): Promise {
const application = getApplication();
if (application?.currentAppId$) {
application.currentAppId$
@@ -73,66 +92,73 @@ export class EditInLensAction implements Action {
getEmbeddable().getStateTransfer().isTransferInProgress = false;
});
}
+
const { embeddable } = context;
- if (isVisualizeEmbeddable(embeddable)) {
- const vis = embeddable.getVis();
- const navigateToLensConfig = await vis.type.navigateToLens?.(vis, this.timefilter);
- // Filters and query set on the visualization level
- const visFilters = vis.data.searchSource?.getField('filter');
- const visQuery = vis.data.searchSource?.getField('query');
- const parentSearchSource = vis.data.searchSource?.getParent();
- const searchFilters = parentSearchSource?.getField('filter') ?? visFilters;
- const searchQuery = parentSearchSource?.getField('query') ?? visQuery;
- const title = vis.title || embeddable.getOutput().title;
- const updatedWithMeta = {
- ...navigateToLensConfig,
- title,
- visTypeTitle: vis.type.title,
- embeddableId: embeddable.id,
- originatingApp: this.currentAppId,
- searchFilters,
- searchQuery,
- isEmbeddable: true,
- description: vis.description || embeddable.getOutput().description,
- panelTimeRange: embeddable.getExplicitInput()?.timeRange,
- };
- if (navigateToLensConfig) {
- if (this.currentAppId) {
- getUsageCollection().reportUiCounter(
- this.currentAppId,
- METRIC_TYPE.CLICK,
- ACTION_EDIT_IN_LENS
- );
- }
- getEmbeddable().getStateTransfer().isTransferInProgress = true;
- getUiActions().getTrigger(DASHBOARD_VISUALIZATION_PANEL_TRIGGER).exec(updatedWithMeta);
+ if (!compatibilityCheck(embeddable)) return;
+
+ const vis = embeddable.getVis();
+ const navigateToLensConfig = await vis.type.navigateToLens?.(vis, this.timefilter);
+ // Filters and query set on the visualization level
+ const visFilters = vis.data.searchSource?.getField('filter');
+ const visQuery = vis.data.searchSource?.getField('query');
+ const parentSearchSource = vis.data.searchSource?.getParent();
+ const searchFilters = parentSearchSource?.getField('filter') ?? visFilters;
+ const searchQuery = parentSearchSource?.getField('query') ?? visQuery;
+ const title = vis.title || embeddable.panelTitle?.getValue();
+ const panelTimeRange = embeddable.localTimeRange?.getValue();
+ const updatedWithMeta = {
+ ...navigateToLensConfig,
+ title,
+ visTypeTitle: vis.type.title,
+ embeddableId: embeddable.uuid,
+ originatingApp: this.currentAppId,
+ searchFilters,
+ searchQuery,
+ isEmbeddable: true,
+ description: vis.description || embeddable.panelDescription?.getValue(),
+ panelTimeRange,
+ };
+ if (navigateToLensConfig) {
+ if (this.currentAppId) {
+ getUsageCollection().reportUiCounter(
+ this.currentAppId,
+ METRIC_TYPE.CLICK,
+ ACTION_EDIT_IN_LENS
+ );
}
+ getEmbeddable().getStateTransfer().isTransferInProgress = true;
+ getUiActions().getTrigger(DASHBOARD_VISUALIZATION_PANEL_TRIGGER).exec(updatedWithMeta);
}
}
- getDisplayName(context: ActionExecutionContext): string {
+ getDisplayName(): string {
return displayName;
}
MenuItem = MenuItem;
- getIconType(context: ActionExecutionContext): string | undefined {
+ getIconType(): string {
return 'merge';
}
- async isCompatible(context: ActionExecutionContext) {
+ async isCompatible(context: EmbeddableApiContext) {
const { embeddable } = context;
- const { visualize } = getCapabilities();
- if (!isVisualizeEmbeddable(embeddable) || !visualize.show) {
+ if (!compatibilityCheck(embeddable) || getInheritedViewMode(embeddable) !== ViewMode.EDIT)
return false;
- }
+
const vis = embeddable.getVis();
- if (!vis) {
+ const { visualize } = getCapabilities();
+ if (!vis || !visualize.show) {
return false;
}
- const canNavigateToLens =
- embeddable.getExpressionVariables?.()?.canNavigateToLens ??
- (await vis.type.navigateToLens?.(vis, this.timefilter));
- return Boolean(canNavigateToLens && embeddable.getInput().viewMode === ViewMode.EDIT);
+
+ // determine whether navigation to lens is available
+ if (
+ apiHasExpressionVariables(embeddable) &&
+ embeddable.getExpressionVariables()?.canNavigateToLens
+ ) {
+ return true;
+ }
+ return Boolean(await vis.type.navigateToLens?.(vis, this.timefilter));
}
}
diff --git a/src/plugins/visualizations/public/embeddable/interfaces/has_expression_variables.ts b/src/plugins/visualizations/public/embeddable/interfaces/has_expression_variables.ts
new file mode 100644
index 000000000000..1a26eafc9734
--- /dev/null
+++ b/src/plugins/visualizations/public/embeddable/interfaces/has_expression_variables.ts
@@ -0,0 +1,29 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import { type HasType, apiIsOfType } from '@kbn/presentation-publishing';
+import { Observable } from 'rxjs';
+
+type ExpressionVariables = Record | undefined;
+
+export type HasExpressionVariables = HasType<'visualization'> & {
+ getExpressionVariables: () => ExpressionVariables;
+ getExpressionVariables$: () => Observable;
+};
+
+export const apiHasExpressionVariables = (api: unknown): api is HasExpressionVariables => {
+ const maybeHasExpressionVariables = api as HasExpressionVariables;
+ return Boolean(
+ api &&
+ apiIsOfType(api, 'visualization') &&
+ maybeHasExpressionVariables.getExpressionVariables &&
+ typeof maybeHasExpressionVariables.getExpressionVariables === 'function' &&
+ maybeHasExpressionVariables.getExpressionVariables$ &&
+ typeof maybeHasExpressionVariables.getExpressionVariables$ === 'function'
+ );
+};
diff --git a/src/plugins/visualizations/public/visualize_app/components/visualize_listing.tsx b/src/plugins/visualizations/public/visualize_app/components/visualize_listing.tsx
index 267b9baf6adf..1bd4a14c2e7d 100644
--- a/src/plugins/visualizations/public/visualize_app/components/visualize_listing.tsx
+++ b/src/plugins/visualizations/public/visualize_app/components/visualize_listing.tsx
@@ -269,7 +269,7 @@ const useTableListViewProps = (
reason: managed
? i18n.translate('visualizations.managedLegacyVisMessage', {
defaultMessage:
- 'This visualization is managed by Elastic and cannot be changed.',
+ 'Elastic manages this visualisation. Changing it is not possible.',
})
: i18n.translate('visualizations.readOnlyLegacyVisMessage', {
defaultMessage:
diff --git a/src/plugins/visualizations/public/visualize_app/utils/get_top_nav_config.tsx b/src/plugins/visualizations/public/visualize_app/utils/get_top_nav_config.tsx
index 955c3f611176..6cbe7864031a 100644
--- a/src/plugins/visualizations/public/visualize_app/utils/get_top_nav_config.tsx
+++ b/src/plugins/visualizations/public/visualize_app/utils/get_top_nav_config.tsx
@@ -609,7 +609,7 @@ export const getTopNavConfig = (
savedVis.managed
? i18n.translate('visualizations.topNavMenu.mustCopyOnSave', {
defaultMessage:
- 'This visualization is managed by Elastic. Changes here must be saved to a new visualization.',
+ 'Elastic manages this visualization. Save any changes to a new visualization.',
})
: undefined
}
diff --git a/test/api_integration/apis/saved_objects/bulk_get.ts b/test/api_integration/apis/saved_objects/bulk_get.ts
index 62f95c718ab1..d9a6dfc2f743 100644
--- a/test/api_integration/apis/saved_objects/bulk_get.ts
+++ b/test/api_integration/apis/saved_objects/bulk_get.ts
@@ -230,10 +230,10 @@ export default function ({ getService }: FtrProviderContext) {
type: 'dashboard',
namespaces: ['default'],
migrationVersion: {
- dashboard: '8.9.0',
+ dashboard: '10.2.0',
},
coreMigrationVersion: '8.8.0',
- typeMigrationVersion: '8.9.0',
+ typeMigrationVersion: '10.2.0',
updated_at: '2015-01-01T00:00:00.000Z',
created_at: '2015-01-01T00:00:00.000Z',
version: resp.body.saved_objects[3].version,
diff --git a/test/api_integration/apis/saved_objects/get.ts b/test/api_integration/apis/saved_objects/get.ts
index 7a1b272b515f..a399e095da0a 100644
--- a/test/api_integration/apis/saved_objects/get.ts
+++ b/test/api_integration/apis/saved_objects/get.ts
@@ -80,10 +80,10 @@ export default function ({ getService }: FtrProviderContext) {
type: 'dashboard',
namespaces: ['default'],
migrationVersion: {
- dashboard: '8.9.0',
+ dashboard: '10.2.0',
},
coreMigrationVersion: '8.8.0',
- typeMigrationVersion: '8.9.0',
+ typeMigrationVersion: '10.2.0',
updated_at: resp.body.updated_at,
created_at: resp.body.created_at,
version: resp.body.version,
diff --git a/test/functional/apps/dashboard/group5/embed_mode.ts b/test/functional/apps/dashboard/group5/embed_mode.ts
index 25eabca77f71..d8ff2f42a3a3 100644
--- a/test/functional/apps/dashboard/group5/embed_mode.ts
+++ b/test/functional/apps/dashboard/group5/embed_mode.ts
@@ -24,7 +24,8 @@ export default function ({
const screenshot = getService('screenshots');
const log = getService('log');
- describe('embed mode', () => {
+ // Failing: See https://github.com/elastic/kibana/issues/176882
+ describe.skip('embed mode', () => {
/*
* Note: The baseline images used in all of the screenshot tests in this test suite were taken directly from the CI environment
* in order to overcome a known issue with the pixel density of fonts being significantly different when running locally versus
diff --git a/test/functional/apps/dashboard_elements/controls/common/control_group_apply_button.ts b/test/functional/apps/dashboard_elements/controls/common/control_group_apply_button.ts
new file mode 100644
index 000000000000..f07f7206b628
--- /dev/null
+++ b/test/functional/apps/dashboard_elements/controls/common/control_group_apply_button.ts
@@ -0,0 +1,223 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import { OPTIONS_LIST_CONTROL, RANGE_SLIDER_CONTROL } from '@kbn/controls-plugin/common';
+import expect from '@kbn/expect';
+
+import { FtrProviderContext } from '../../../../ftr_provider_context';
+
+export default function ({ getService, getPageObjects }: FtrProviderContext) {
+ const pieChart = getService('pieChart');
+ const elasticChart = getService('elasticChart');
+ const testSubjects = getService('testSubjects');
+ const dashboardAddPanel = getService('dashboardAddPanel');
+
+ const { dashboard, header, dashboardControls, timePicker } = getPageObjects([
+ 'dashboardControls',
+ 'timePicker',
+ 'dashboard',
+ 'header',
+ ]);
+
+ describe('Dashboard control group apply button', () => {
+ let controlIds: string[];
+
+ before(async () => {
+ await dashboard.navigateToApp();
+ await dashboard.gotoDashboardLandingPage();
+ await dashboard.clickNewDashboard();
+ await timePicker.setDefaultDataRange();
+
+ await elasticChart.setNewChartUiDebugFlag();
+ await dashboardAddPanel.addVisualization('Rendering-Test:-animal-sounds-pie');
+
+ // populate an initial set of controls and get their ids.
+ await dashboardControls.createControl({
+ controlType: OPTIONS_LIST_CONTROL,
+ dataViewTitle: 'animals-*',
+ fieldName: 'animal.keyword',
+ title: 'Animal',
+ });
+ await dashboardControls.createControl({
+ controlType: RANGE_SLIDER_CONTROL,
+ dataViewTitle: 'animals-*',
+ fieldName: 'weightLbs',
+ title: 'Animal Name',
+ });
+ await dashboardControls.createTimeSliderControl();
+ controlIds = await dashboardControls.getAllControlIds();
+
+ // save the dashboard
+ await dashboard.saveDashboard('Test Control Group Apply Button', { exitFromEditMode: false });
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+ await dashboard.expectMissingUnsavedChangesBadge();
+ });
+
+ it('able to set apply button setting', async () => {
+ await dashboardControls.updateShowApplyButtonSetting(true);
+ await testSubjects.existOrFail('controlGroup--applyFiltersButton');
+ await dashboard.expectUnsavedChangesBadge();
+
+ await dashboard.clickQuickSave();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.expectMissingUnsavedChangesBadge();
+ });
+
+ it('renabling auto-apply forces filters to be published', async () => {
+ const optionsListId = controlIds[0];
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ await dashboardControls.optionsListOpenPopover(optionsListId);
+ await dashboardControls.optionsListPopoverSelectOption('cat');
+ await dashboardControls.optionsListEnsurePopoverIsClosed(optionsListId);
+ await header.waitUntilLoadingHasFinished();
+ await dashboardControls.verifyApplyButtonEnabled();
+
+ await dashboardControls.updateShowApplyButtonSetting(false);
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ await dashboard.expectUnsavedChangesBadge();
+ expect(await pieChart.getPieSliceCount()).to.be(4);
+ await dashboard.clickDiscardChanges();
+ });
+
+ describe('options list selections', () => {
+ let optionsListId: string;
+
+ before(async () => {
+ optionsListId = controlIds[0];
+ });
+
+ it('making selection enables apply button', async () => {
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ await dashboardControls.optionsListOpenPopover(optionsListId);
+ await dashboardControls.optionsListPopoverSelectOption('cat');
+ await dashboardControls.optionsListEnsurePopoverIsClosed(optionsListId);
+ await header.waitUntilLoadingHasFinished();
+ await dashboardControls.verifyApplyButtonEnabled();
+ });
+
+ it('waits to apply filters until button is pressed', async () => {
+ await dashboard.expectMissingUnsavedChangesBadge();
+ expect(await pieChart.getPieSliceCount()).to.be(5);
+
+ await dashboardControls.clickApplyButton();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ await dashboard.expectUnsavedChangesBadge();
+ expect(await pieChart.getPieSliceCount()).to.be(4);
+ });
+
+ it('hitting dashboard resets selections + unapplies filters', async () => {
+ await dashboardControls.optionsListOpenPopover(optionsListId);
+ await dashboardControls.optionsListPopoverSelectOption('dog');
+ await dashboardControls.optionsListEnsurePopoverIsClosed(optionsListId);
+ await header.waitUntilLoadingHasFinished();
+ await dashboardControls.verifyApplyButtonEnabled();
+
+ await dashboard.clickDiscardChanges();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ expect(await pieChart.getPieSliceCount()).to.be(5);
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ expect(await dashboardControls.optionsListGetSelectionsString(optionsListId)).to.be('Any');
+ });
+ });
+
+ describe('range slider selections', () => {
+ let rangeSliderId: string;
+
+ before(async () => {
+ rangeSliderId = controlIds[1];
+ });
+
+ it('making selection enables apply button', async () => {
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ await dashboardControls.rangeSliderSetUpperBound(rangeSliderId, '30');
+ await dashboardControls.verifyApplyButtonEnabled();
+ });
+
+ it('waits to apply filters until apply button is pressed', async () => {
+ await dashboard.expectMissingUnsavedChangesBadge();
+ expect(await pieChart.getPieSliceCount()).to.be(5);
+
+ await dashboardControls.clickApplyButton();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ await dashboard.expectUnsavedChangesBadge();
+ expect(await pieChart.getPieSliceCount()).to.be(4);
+ });
+
+ it('hitting dashboard resets selections + unapplies filters', async () => {
+ await dashboardControls.rangeSliderSetLowerBound(rangeSliderId, '15');
+ await dashboardControls.rangeSliderEnsurePopoverIsClosed(rangeSliderId);
+ await header.waitUntilLoadingHasFinished();
+ await dashboardControls.verifyApplyButtonEnabled();
+
+ await dashboard.clickDiscardChanges();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ expect(await pieChart.getPieSliceCount()).to.be(5);
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ expect(
+ await dashboardControls.rangeSliderGetLowerBoundAttribute(rangeSliderId, 'value')
+ ).to.be('');
+ expect(
+ await dashboardControls.rangeSliderGetUpperBoundAttribute(rangeSliderId, 'value')
+ ).to.be('');
+ });
+ });
+
+ describe('time slider selections', () => {
+ let valueBefore: string;
+
+ before(async () => {
+ valueBefore = await dashboardControls.getTimeSliceFromTimeSlider();
+ });
+
+ it('making selection enables apply button', async () => {
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ await dashboardControls.gotoNextTimeSlice();
+ await dashboardControls.gotoNextTimeSlice(); // go to an empty timeslice
+ await header.waitUntilLoadingHasFinished();
+ await dashboardControls.verifyApplyButtonEnabled();
+ });
+
+ it('waits to apply timeslice until apply button is pressed', async () => {
+ await dashboard.expectMissingUnsavedChangesBadge();
+ expect(await pieChart.getPieSliceCount()).to.be(5);
+
+ await dashboardControls.clickApplyButton();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ await dashboard.expectUnsavedChangesBadge();
+ pieChart.expectEmptyPieChart();
+ });
+
+ it('hitting dashboard resets selections + unapplies timeslice', async () => {
+ await dashboardControls.gotoNextTimeSlice();
+ await dashboardControls.verifyApplyButtonEnabled();
+
+ await dashboard.clickDiscardChanges();
+ await header.waitUntilLoadingHasFinished();
+ await dashboard.waitForRenderComplete();
+
+ expect(await pieChart.getPieSliceCount()).to.be(5);
+ await dashboardControls.verifyApplyButtonEnabled(false);
+ const valueNow = await dashboardControls.getTimeSliceFromTimeSlider();
+ expect(valueNow).to.equal(valueBefore);
+ });
+ });
+ });
+}
diff --git a/test/functional/apps/dashboard_elements/controls/common/index.ts b/test/functional/apps/dashboard_elements/controls/common/index.ts
index 74e64052f166..c9098b1a2c68 100644
--- a/test/functional/apps/dashboard_elements/controls/common/index.ts
+++ b/test/functional/apps/dashboard_elements/controls/common/index.ts
@@ -44,6 +44,7 @@ export default function ({ loadTestFile, getService, getPageObjects }: FtrProvid
loadTestFile(require.resolve('./range_slider'));
loadTestFile(require.resolve('./time_slider'));
loadTestFile(require.resolve('./control_group_chaining'));
+ loadTestFile(require.resolve('./control_group_apply_button'));
loadTestFile(require.resolve('./replace_controls'));
});
}
diff --git a/test/functional/apps/discover/group1/_discover.ts b/test/functional/apps/discover/group1/_discover.ts
index c931187250cc..3885230c861c 100644
--- a/test/functional/apps/discover/group1/_discover.ts
+++ b/test/functional/apps/discover/group1/_discover.ts
@@ -31,7 +31,8 @@ export default function ({ getService, getPageObjects }: FtrProviderContext) {
defaultIndex: 'logstash-*',
};
- describe('discover test', function describeIndexTests() {
+ // Failing: See https://github.com/elastic/kibana/issues/176882
+ describe.skip('discover test', function describeIndexTests() {
before(async function () {
log.debug('load kibana index with default index pattern');
await kibanaServer.importExport.load('test/functional/fixtures/kbn_archiver/discover');
diff --git a/test/functional/apps/discover/group1/_url_state.ts b/test/functional/apps/discover/group1/_url_state.ts
index e97ac332e8b6..95ef40a58698 100644
--- a/test/functional/apps/discover/group1/_url_state.ts
+++ b/test/functional/apps/discover/group1/_url_state.ts
@@ -35,7 +35,8 @@ export default function ({ getService, getPageObjects }: FtrProviderContext) {
hideAnnouncements: true,
};
- describe('discover URL state', () => {
+ // Failing: See https://github.com/elastic/kibana/issues/176882
+ describe.skip('discover URL state', () => {
before(async function () {
log.debug('load kibana index with default index pattern');
await kibanaServer.importExport.load('test/functional/fixtures/kbn_archiver/discover');
diff --git a/test/functional/apps/visualize/group3/_annotation_listing.ts b/test/functional/apps/visualize/group3/_annotation_listing.ts
index 53ae9d48e2b5..f58f2fd38602 100644
--- a/test/functional/apps/visualize/group3/_annotation_listing.ts
+++ b/test/functional/apps/visualize/group3/_annotation_listing.ts
@@ -50,8 +50,10 @@ export default function ({ getService, getPageObjects }: FtrProviderContext) {
describe('by text', () => {
it('matches on the first word', async function () {
- await listingTable.searchForItemWithName('search');
- await listingTable.expectItemsCount('eventAnnotation', 1);
+ await retry.try(async () => {
+ await listingTable.searchForItemWithName('search');
+ await listingTable.expectItemsCount('eventAnnotation', 1);
+ });
});
it('matches the second word', async function () {
diff --git a/test/functional/page_objects/dashboard_page.ts b/test/functional/page_objects/dashboard_page.ts
index f5acc43f8827..01fe52270cc8 100644
--- a/test/functional/page_objects/dashboard_page.ts
+++ b/test/functional/page_objects/dashboard_page.ts
@@ -348,12 +348,14 @@ export class DashboardPageObject extends FtrService {
}
public async expectUnsavedChangesBadge() {
+ this.log.debug('Expect unsaved changes badge to be present');
await this.retry.try(async () => {
await this.testSubjects.existOrFail('dashboardUnsavedChangesBadge');
});
}
public async expectMissingUnsavedChangesBadge() {
+ this.log.debug('Expect there to be no unsaved changes badge');
await this.retry.try(async () => {
await this.testSubjects.missingOrFail('dashboardUnsavedChangesBadge');
});
diff --git a/test/functional/page_objects/dashboard_page_controls.ts b/test/functional/page_objects/dashboard_page_controls.ts
index 8f7a64260c37..119b347c2ca6 100644
--- a/test/functional/page_objects/dashboard_page_controls.ts
+++ b/test/functional/page_objects/dashboard_page_controls.ts
@@ -203,6 +203,34 @@ export class DashboardPageControls extends FtrService {
await this.testSubjects.click('control-group-editor-save');
}
+ public async updateShowApplyButtonSetting(showApplyButton: boolean) {
+ this.log.debug(`Update show apply button setting to ${showApplyButton}`);
+ await this.openControlGroupSettingsFlyout();
+ // the "showApplyButton" toggle has in inverse relationship with the `showApplyButton` seting - so, negate `showApplyButton`
+ await this.setSwitchState(!showApplyButton, 'control-group-auto-apply-selections');
+ await this.testSubjects.click('control-group-editor-save');
+ }
+
+ public async clickApplyButton() {
+ this.log.debug('Clicking the apply button');
+ await this.verifyApplyButtonEnabled();
+
+ const applyButton = await this.testSubjects.find('controlGroup--applyFiltersButton');
+ await applyButton.click();
+
+ await this.verifyApplyButtonEnabled(false);
+ }
+
+ public async verifyApplyButtonEnabled(enabled: boolean = true) {
+ this.log.debug(
+ `Checking that control group apply button is ${enabled ? 'enabled' : 'not enabled'}`
+ );
+ const applyButton = await this.testSubjects.find('controlGroup--applyFiltersButton');
+ await this.retry.try(async () => {
+ expect(await applyButton.isEnabled()).to.be(enabled);
+ });
+ }
+
/* -----------------------------------------------------------
Individual controls functions
----------------------------------------------------------- */
@@ -670,6 +698,10 @@ export class DashboardPageControls extends FtrService {
`range-slider-control-${controlId} > rangeSlider__lowerBoundFieldNumber`,
value
);
+ await this.testSubjects.pressEnter(
+ // force the change without waiting for the debounce
+ `range-slider-control-${controlId} > rangeSlider__lowerBoundFieldNumber`
+ );
expect(await this.rangeSliderGetLowerBoundAttribute(controlId, 'value')).to.be(value);
});
}
@@ -681,6 +713,10 @@ export class DashboardPageControls extends FtrService {
`range-slider-control-${controlId} > rangeSlider__upperBoundFieldNumber`,
value
);
+ await this.testSubjects.pressEnter(
+ // force the change without waiting for the debounce
+ `range-slider-control-${controlId} > rangeSlider__upperBoundFieldNumber`
+ );
expect(await this.rangeSliderGetUpperBoundAttribute(controlId, 'value')).to.be(value);
});
}
diff --git a/test/functional/page_objects/home_page.ts b/test/functional/page_objects/home_page.ts
index 1901f1207343..4225f52b1699 100644
--- a/test/functional/page_objects/home_page.ts
+++ b/test/functional/page_objects/home_page.ts
@@ -48,9 +48,12 @@ export class HomePageObject extends FtrService {
async isSampleDataSetInstalled(id: string) {
const sampleDataCard = await this.testSubjects.find(`sampleDataSetCard${id}`);
+ const installStatus = await (
+ await sampleDataCard.findByCssSelector('[data-status]')
+ ).getAttribute('data-status');
const deleteButton = await sampleDataCard.findAllByTestSubject(`removeSampleDataSet${id}`);
this.log.debug(`Sample data installed: ${deleteButton.length > 0}`);
- return deleteButton.length > 0;
+ return installStatus === 'installed' && deleteButton.length > 0;
}
async isWelcomeInterstitialDisplayed() {
diff --git a/test/functional/services/index.ts b/test/functional/services/index.ts
index 1966755f157e..43a588cdf938 100644
--- a/test/functional/services/index.ts
+++ b/test/functional/services/index.ts
@@ -17,6 +17,7 @@ import {
SnapshotsService,
} from './common';
import { ComboBoxService } from './combo_box';
+import { SelectableService } from './selectable';
import {
DashboardAddPanelService,
DashboardReplacePanelService,
@@ -76,6 +77,7 @@ export const services = {
dashboardSettings: DashboardSettingsProvider,
flyout: FlyoutService,
comboBox: ComboBoxService,
+ selectable: SelectableService,
dataGrid: DataGridService,
embedding: EmbeddingService,
renderable: RenderableService,
diff --git a/test/functional/services/selectable.ts b/test/functional/services/selectable.ts
new file mode 100644
index 000000000000..8dd347ace74a
--- /dev/null
+++ b/test/functional/services/selectable.ts
@@ -0,0 +1,91 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+import { FtrService } from '../ftr_provider_context';
+
+/**
+ * Wrapper around EuiSelectable to provide abstraction for selecting options
+ *
+ * @example
+ * ```tsx
+ * const button = (
+ *
+ * {label}
+ *
+ * );
+ *
+ *
+ *
+ * {listOptions}
+ *
+ *
+ * ```
+ *
+ * // Select only options with text 'option1' and 'option2'
+ * ```typescript
+ * await selectableService.selectOnlyOptionsWithText('buttonTestId', 'selectableTestId', ['option1', 'option2']);
+ * ```
+ */
+export class SelectableService extends FtrService {
+ private readonly log = this.ctx.getService('log');
+ private readonly testSubjects = this.ctx.getService('testSubjects');
+ private readonly common = this.ctx.getPageObject('common');
+
+ public async selectOnlyOptionsWithText(
+ buttonTestSubjectId: string,
+ selectableBodyTestSubjectId: string,
+ textsToSelect: string[]
+ ) {
+ this.log.debug(
+ `Selectable.selectOnlyOptionsWithText, buttonTestSubjectId: ${buttonTestSubjectId},` +
+ `selectableBodyTestSubjectId: ${selectableBodyTestSubjectId}, textsToSelect: ${textsToSelect}`
+ );
+
+ // Open the selectable
+ await this.testSubjects.click(buttonTestSubjectId);
+ await this.common.sleep(500);
+
+ const selectableBodyContainer = await this.testSubjects.find(selectableBodyTestSubjectId);
+ const listContainer = await selectableBodyContainer.findByClassName('euiSelectableList');
+ const optionListElements = await listContainer.findAllByCssSelector('li[role="option"]');
+
+ for (let i = 0; i < optionListElements.length; i++) {
+ const option = optionListElements[i];
+ const isSelected = (await option.getAttribute('aria-checked')) === 'true';
+ const textWrapper = await option.findByClassName('euiSelectableListItem__text');
+
+ // Use innerText as getVisibleText doesn't return deeply nested text
+ const innerText = await textWrapper.getAttribute('innerText');
+
+ // Replace screen reader and other Eui related text
+ const visibleText = innerText
+ .replace(screenReaderOptionText, '')
+ .replace('\n.', '')
+ .replace('.\n', '')
+ .trim();
+ const doesOptionTextMatch = textsToSelect.some((text) => text === visibleText);
+
+ if ((doesOptionTextMatch && !isSelected) || (!doesOptionTextMatch && isSelected)) {
+ await option.click();
+ }
+ }
+
+ // Close selectable
+ return this.testSubjects.click(buttonTestSubjectId);
+ }
+
+ public async clearSelection(buttonTestSubjectId: string, selectableBodyTestSubjectId: string) {
+ return this.selectOnlyOptionsWithText(buttonTestSubjectId, selectableBodyTestSubjectId, []);
+ }
+}
+
+const screenReaderOptionText = 'To check this option, press Enter.';
diff --git a/tsconfig.base.json b/tsconfig.base.json
index 94bd00f22559..f0c0a36383b5 100644
--- a/tsconfig.base.json
+++ b/tsconfig.base.json
@@ -1132,6 +1132,8 @@
"@kbn/notifications-plugin/*": ["x-pack/plugins/notifications/*"],
"@kbn/object-versioning": ["packages/kbn-object-versioning"],
"@kbn/object-versioning/*": ["packages/kbn-object-versioning/*"],
+ "@kbn/observability-ai-assistant-app-plugin": ["x-pack/plugins/observability_solution/observability_ai_assistant_app"],
+ "@kbn/observability-ai-assistant-app-plugin/*": ["x-pack/plugins/observability_solution/observability_ai_assistant_app/*"],
"@kbn/observability-ai-assistant-plugin": ["x-pack/plugins/observability_solution/observability_ai_assistant"],
"@kbn/observability-ai-assistant-plugin/*": ["x-pack/plugins/observability_solution/observability_ai_assistant/*"],
"@kbn/observability-alert-details": ["x-pack/packages/observability/alert_details"],
diff --git a/x-pack/.i18nrc.json b/x-pack/.i18nrc.json
index b640b2ac0f8e..b3b25e47fc22 100644
--- a/x-pack/.i18nrc.json
+++ b/x-pack/.i18nrc.json
@@ -2,7 +2,10 @@
"prefix": "xpack",
"paths": {
"xpack.actions": "plugins/actions",
- "xpack.aiops": ["packages/ml/aiops_components", "plugins/aiops"],
+ "xpack.aiops": [
+ "packages/ml/aiops_components",
+ "plugins/aiops"
+ ],
"xpack.alerting": "plugins/alerting",
"xpack.eventLog": "plugins/event_log",
"xpack.stackAlerts": "plugins/stack_alerts",
@@ -33,9 +36,15 @@
"xpack.dataVisualizer": "plugins/data_visualizer",
"xpack.exploratoryView": "plugins/observability_solution/exploratory_view",
"xpack.fileUpload": "plugins/file_upload",
- "xpack.globalSearch": ["plugins/global_search"],
- "xpack.globalSearchBar": ["plugins/global_search_bar"],
- "xpack.graph": ["plugins/graph"],
+ "xpack.globalSearch": [
+ "plugins/global_search"
+ ],
+ "xpack.globalSearchBar": [
+ "plugins/global_search_bar"
+ ],
+ "xpack.graph": [
+ "plugins/graph"
+ ],
"xpack.grokDebugger": "plugins/grokdebugger",
"xpack.idxMgmt": "plugins/index_management",
"xpack.indexLifecycleMgmt": "plugins/index_lifecycle_management",
@@ -50,9 +59,13 @@
"xpack.licenseMgmt": "plugins/license_management",
"xpack.licensing": "plugins/licensing",
"xpack.lists": "plugins/lists",
- "xpack.logstash": ["plugins/logstash"],
+ "xpack.logstash": [
+ "plugins/logstash"
+ ],
"xpack.main": "legacy/plugins/xpack_main",
- "xpack.maps": ["plugins/maps"],
+ "xpack.maps": [
+ "plugins/maps"
+ ],
"xpack.metricsData": "plugins/metrics_data_access",
"xpack.ml": [
"packages/ml/anomaly_utils",
@@ -65,18 +78,31 @@
"packages/ml/ui_actions",
"plugins/ml"
],
- "xpack.monitoring": ["plugins/monitoring"],
+ "xpack.monitoring": [
+ "plugins/monitoring"
+ ],
"xpack.observability": "plugins/observability_solution/observability",
- "xpack.observabilityAiAssistant": "plugins/observability_solution/observability_ai_assistant",
+ "xpack.observabilityAiAssistant": [
+ "plugins/observability_solution/observability_ai_assistant",
+ "plugins/observability_solution/observability_ai_assistant_app"
+ ],
"xpack.observabilityLogsExplorer": "plugins/observability_solution/observability_logs_explorer",
"xpack.observability_onboarding": "plugins/observability_solution/observability_onboarding",
"xpack.observabilityShared": "plugins/observability_solution/observability_shared",
- "xpack.osquery": ["plugins/osquery"],
+ "xpack.osquery": [
+ "plugins/osquery"
+ ],
"xpack.painlessLab": "plugins/painless_lab",
- "xpack.profiling": ["plugins/observability_solution/profiling"],
+ "xpack.profiling": [
+ "plugins/observability_solution/profiling"
+ ],
"xpack.remoteClusters": "plugins/remote_clusters",
- "xpack.reporting": ["plugins/reporting"],
- "xpack.rollupJobs": ["plugins/rollup"],
+ "xpack.reporting": [
+ "plugins/reporting"
+ ],
+ "xpack.rollupJobs": [
+ "plugins/rollup"
+ ],
"xpack.runtimeFields": "plugins/runtime_fields",
"xpack.screenshotting": "plugins/screenshotting",
"xpack.searchProfiler": "plugins/searchprofiler",
@@ -91,20 +117,30 @@
"xpack.sessionView": "plugins/session_view",
"xpack.snapshotRestore": "plugins/snapshot_restore",
"xpack.spaces": "plugins/spaces",
- "xpack.savedObjectsTagging": ["plugins/saved_objects_tagging"],
+ "xpack.savedObjectsTagging": [
+ "plugins/saved_objects_tagging"
+ ],
"xpack.taskManager": "legacy/plugins/task_manager",
"xpack.threatIntelligence": "plugins/threat_intelligence",
"xpack.timelines": "plugins/timelines",
"xpack.transform": "plugins/transform",
"xpack.triggersActionsUI": "plugins/triggers_actions_ui",
"xpack.upgradeAssistant": "plugins/upgrade_assistant",
- "xpack.uptime": ["plugins/observability_solution/uptime"],
- "xpack.synthetics": ["plugins/observability_solution/synthetics"],
- "xpack.ux": ["plugins/observability_solution/ux"],
+ "xpack.uptime": [
+ "plugins/observability_solution/uptime"
+ ],
+ "xpack.synthetics": [
+ "plugins/observability_solution/synthetics"
+ ],
+ "xpack.ux": [
+ "plugins/observability_solution/ux"
+ ],
"xpack.urlDrilldown": "plugins/drilldowns/url_drilldown",
"xpack.watcher": "plugins/watcher"
},
- "exclude": ["examples"],
+ "exclude": [
+ "examples"
+ ],
"translations": [
"@kbn/translations-plugin/translations/zh-CN.json",
"@kbn/translations-plugin/translations/ja-JP.json",
diff --git a/x-pack/plugins/actions/server/integration_tests/__snapshots__/connector_types.test.ts.snap b/x-pack/plugins/actions/server/integration_tests/__snapshots__/connector_types.test.ts.snap
index 11624752650e..9b74e91c6eac 100644
--- a/x-pack/plugins/actions/server/integration_tests/__snapshots__/connector_types.test.ts.snap
+++ b/x-pack/plugins/actions/server/integration_tests/__snapshots__/connector_types.test.ts.snap
@@ -10,7 +10,7 @@ Object {
"presence": "optional",
},
"keys": Object {
- "apiUrl": Object {
+ "body": Object {
"flags": Object {
"error": [Function],
},
@@ -24,9 +24,9 @@ Object {
],
"type": "string",
},
- "defaultModel": Object {
+ "model": Object {
"flags": Object {
- "default": "anthropic.claude-v2:1",
+ "default": [Function],
"error": [Function],
"presence": "optional",
},
@@ -60,21 +60,7 @@ Object {
"presence": "optional",
},
"keys": Object {
- "accessKey": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "secret": Object {
+ "dashboardId": Object {
"flags": Object {
"error": [Function],
},
@@ -108,7 +94,7 @@ Object {
"presence": "optional",
},
"keys": Object {
- "subAction": Object {
+ "body": Object {
"flags": Object {
"error": [Function],
},
@@ -122,22 +108,21 @@ Object {
],
"type": "string",
},
- "subActionParams": Object {
+ "model": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
+ "default": [Function],
"error": [Function],
"presence": "optional",
- "unknown": true,
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- },
- "type": "object",
+ ],
+ "type": "string",
},
},
"preferences": Object {
@@ -149,7 +134,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .cases-webhook 1`] = `
+exports[`Connector type config checks detect connector type changes for: .bedrock 4`] = `
Object {
"flags": Object {
"default": Object {
@@ -159,155 +144,64 @@ Object {
"presence": "optional",
},
"keys": Object {
- "createCommentJson": Object {
+ "messages": Object {
"flags": Object {
- "default": null,
"error": [Function],
- "presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
+ "items": Array [
Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
},
- "type": "any",
+ "error": [Function],
+ "presence": "optional",
},
- },
- ],
- "type": "alternatives",
- },
- "createCommentMethod": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "default": "put",
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "allow": Array [
- "post",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
+ "keys": Object {
+ "content": Object {
+ "flags": Object {
+ "error": [Function],
},
- Object {
- "schema": Object {
- "allow": Array [
- "put",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "type": "any",
+ "name": "custom",
},
+ ],
+ "type": "string",
+ },
+ "role": Object {
+ "flags": Object {
+ "error": [Function],
},
- Object {
- "schema": Object {
- "allow": Array [
- "patch",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "type": "any",
+ "name": "custom",
},
- },
- ],
- "type": "alternatives",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "createCommentUrl": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
+ ],
+ "type": "string",
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
},
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
},
- "type": "any",
},
+ "type": "object",
},
],
- "type": "alternatives",
+ "type": "array",
},
- "createIncidentJson": Object {
+ "model": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
"rules": Array [
Object {
@@ -319,71 +213,117 @@ Object {
],
"type": "string",
},
- "createIncidentMethod": Object {
+ "stopSequences": Object {
"flags": Object {
- "default": "post",
+ "default": [Function],
"error": [Function],
"presence": "optional",
},
- "matches": Array [
+ "items": Array [
Object {
- "schema": Object {
- "allow": Array [
- "post",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
},
- },
- Object {
- "schema": Object {
- "allow": Array [
- "put",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- "type": "any",
- },
+ ],
+ "type": "string",
},
],
- "type": "alternatives",
+ "type": "array",
},
- "createIncidentResponseKey": Object {
+ "temperature": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
+ "type": "number",
},
- "createIncidentUrl": Object {
- "flags": Object {
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .bedrock 5`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "messages": Object {
+ "flags": Object {
"error": [Function],
},
- "rules": Array [
+ "items": Array [
Object {
- "args": Object {
- "method": [Function],
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
},
- "name": "custom",
+ "keys": Object {
+ "content": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "role": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
},
],
- "type": "string",
+ "type": "array",
},
- "getIncidentResponseExternalTitleKey": Object {
+ "model": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
"rules": Array [
Object {
@@ -395,94 +335,60 @@ Object {
],
"type": "string",
},
- "getIncidentUrl": Object {
+ "stopSequences": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
+ "items": Array [
Object {
- "args": Object {
- "method": [Function],
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
},
- "name": "custom",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
],
- "type": "string",
- },
- "hasAuth": Object {
- "flags": Object {
- "default": true,
- "error": [Function],
- "presence": "optional",
- },
- "type": "boolean",
+ "type": "array",
},
- "headers": Object {
+ "temperature": Object {
"flags": Object {
"default": [Function],
"error": [Function],
"presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "key": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "value": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "name": "entries",
- },
- ],
- "type": "record",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
+ "type": "number",
},
- "updateIncidentJson": Object {
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .bedrock 6`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiUrl": Object {
"flags": Object {
"error": [Function],
},
@@ -496,53 +402,43 @@ Object {
],
"type": "string",
},
- "updateIncidentMethod": Object {
+ "defaultModel": Object {
"flags": Object {
- "default": "put",
+ "default": "anthropic.claude-v2:1",
"error": [Function],
"presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "allow": Array [
- "post",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- "patch",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
+ "rules": Array [
Object {
- "schema": Object {
- "allow": Array [
- "put",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
],
- "type": "alternatives",
+ "type": "string",
},
- "updateIncidentUrl": Object {
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .bedrock 7`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "accessKey": Object {
"flags": Object {
"error": [Function],
},
@@ -556,7 +452,7 @@ Object {
],
"type": "string",
},
- "viewIncidentUrl": Object {
+ "secret": Object {
"flags": Object {
"error": [Function],
},
@@ -580,7 +476,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .cases-webhook 2`] = `
+exports[`Connector type config checks detect connector type changes for: .bedrock 8`] = `
Object {
"flags": Object {
"default": Object {
@@ -590,16 +486,67 @@ Object {
"presence": "optional",
},
"keys": Object {
- "password": Object {
+ "subAction": Object {
"flags": Object {
- "default": null,
"error": [Function],
- "presence": "optional",
},
- "matches": Array [
+ "rules": Array [
Object {
- "schema": Object {
- "flags": Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ "unknown": true,
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .cases-webhook 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "createCommentJson": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
"error": [Function],
},
"rules": Array [
@@ -628,7 +575,77 @@ Object {
],
"type": "alternatives",
},
- "user": Object {
+ "createCommentMethod": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": "put",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "post",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "put",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "patch",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createCommentUrl": Object {
"flags": Object {
"default": null,
"error": [Function],
@@ -666,35 +683,31 @@ Object {
],
"type": "alternatives",
},
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .cases-webhook 3`] = `
-Object {
- "flags": Object {
- "error": [Function],
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "createIncidentJson": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "error": [Function],
- "presence": "optional",
+ "name": "custom",
},
- "keys": Object {
- "subAction": Object {
+ ],
+ "type": "string",
+ },
+ "createIncidentMethod": Object {
+ "flags": Object {
+ "default": "post",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"allow": Array [
- "pushToService",
+ "post",
],
"flags": Object {
"error": [Function],
@@ -702,393 +715,152 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "put",
+ ],
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
+ "only": true,
},
- "keys": Object {
- "comments": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "items": Array [
- Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "comment": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "commentId": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- ],
- "type": "array",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "incident": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "description": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "externalId": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "id": Object {
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createIncidentResponseKey": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "createIncidentUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "getIncidentResponseExternalTitleKey": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "getIncidentUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "hasAuth": Object {
+ "flags": Object {
+ "default": true,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "boolean",
+ },
+ "headers": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "key": Object {
"flags": Object {
- "default": null,
"error": [Function],
- "presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
+ "rules": Array [
Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
],
- "type": "alternatives",
+ "type": "string",
},
- "severity": Object {
+ "value": Object {
"flags": Object {
- "default": null,
"error": [Function],
- "presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
+ "rules": Array [
Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
],
- "type": "alternatives",
- },
- "status": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "tags": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "items": Array [
- Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- ],
- "type": "array",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "title": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "type": "string",
},
},
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "name": "entries",
},
- },
- "type": "object",
+ ],
+ "type": "record",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
},
- "type": "object",
- },
- },
- ],
- "type": "alternatives",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .d3security 1`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ ],
+ "type": "alternatives",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "url": Object {
+ "updateIncidentJson": Object {
"flags": Object {
"error": [Function],
},
@@ -1102,27 +874,53 @@ Object {
],
"type": "string",
},
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .d3security 2`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "updateIncidentMethod": Object {
+ "flags": Object {
+ "default": "put",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "post",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "patch",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "put",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "token": Object {
+ "updateIncidentUrl": Object {
"flags": Object {
"error": [Function],
},
@@ -1136,27 +934,7 @@ Object {
],
"type": "string",
},
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .d3security 3`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "subAction": Object {
+ "viewIncidentUrl": Object {
"flags": Object {
"error": [Function],
},
@@ -1170,23 +948,6 @@ Object {
],
"type": "string",
},
- "subActionParams": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- "unknown": true,
- },
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
},
"preferences": Object {
"stripUnknown": Object {
@@ -1197,7 +958,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .email 1`] = `
+exports[`Connector type config checks detect connector type changes for: .cases-webhook 2`] = `
Object {
"flags": Object {
"default": Object {
@@ -1207,7 +968,7 @@ Object {
"presence": "optional",
},
"keys": Object {
- "clientId": Object {
+ "password": Object {
"flags": Object {
"default": null,
"error": [Function],
@@ -1245,197 +1006,9 @@ Object {
],
"type": "alternatives",
},
- "from": Object {
+ "user": Object {
"flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "hasAuth": Object {
- "flags": Object {
- "default": true,
- "error": [Function],
- "presence": "optional",
- },
- "type": "boolean",
- },
- "host": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "oauthTokenUrl": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "port": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "limit": 1,
- },
- "name": "min",
- },
- Object {
- "args": Object {
- "limit": 65535,
- },
- "name": "max",
- },
- ],
- "type": "number",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "secure": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "type": "boolean",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "service": Object {
- "flags": Object {
- "default": "other",
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "tenantId": Object {
- "flags": Object {
- "default": null,
+ "default": null,
"error": [Function],
"presence": "optional",
},
@@ -1481,43 +1054,25 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .email 2`] = `
+exports[`Connector type config checks detect connector type changes for: .cases-webhook 3`] = `
Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "clientSecret": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
},
+ "error": [Function],
+ "presence": "optional",
},
- Object {
- "schema": Object {
+ "keys": Object {
+ "subAction": Object {
"allow": Array [
- null,
+ "pushToService",
],
"flags": Object {
"error": [Function],
@@ -1525,426 +1080,369 @@ Object {
},
"type": "any",
},
- },
- ],
- "type": "alternatives",
- },
- "password": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
+ "subActionParams": Object {
"flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "user": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
+ "keys": Object {
+ "comments": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
},
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .email 3`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "bcc": Object {
- "flags": Object {
- "default": Array [],
- "error": [Function],
- "presence": "optional",
- },
- "items": Array [
- Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- ],
- "type": "array",
- },
- "cc": Object {
- "flags": Object {
- "default": Array [],
- "error": [Function],
- "presence": "optional",
- },
- "items": Array [
- Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- ],
- "type": "array",
- },
- "kibanaFooterLink": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "path": Object {
- "flags": Object {
- "default": "/",
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "text": Object {
- "flags": Object {
- "default": "Go to Elastic",
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "comment": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "commentId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
},
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- "message": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "messageHTML": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "subject": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "to": Object {
- "flags": Object {
- "default": Array [],
- "error": [Function],
- "presence": "optional",
- },
- "items": Array [
- Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- ],
- "type": "array",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .gen-ai 1`] = `
-Object {
- "flags": Object {
- "error": [Function],
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiProvider": Object {
- "flags": Object {
- "error": [Function],
- },
- "matches": Array [
- Object {
- "schema": Object {
- "allow": Array [
- "Azure OpenAI",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "incident": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
},
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "apiUrl": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
+ "error": [Function],
+ "presence": "optional",
},
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiProvider": Object {
- "flags": Object {
- "error": [Function],
- },
- "matches": Array [
- Object {
- "schema": Object {
- "allow": Array [
- "OpenAI",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "keys": Object {
+ "description": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
},
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "apiUrl": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "defaultModel": Object {
- "flags": Object {
- "default": "gpt-4",
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
+ "externalId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "id": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "severity": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "status": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "tags": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "title": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
"preferences": Object {
"stripUnknown": Object {
"objects": false,
@@ -1958,7 +1456,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .gen-ai 2`] = `
+exports[`Connector type config checks detect connector type changes for: .d3security 1`] = `
Object {
"flags": Object {
"default": Object {
@@ -1968,9 +1466,11 @@ Object {
"presence": "optional",
},
"keys": Object {
- "apiKey": Object {
+ "body": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
"rules": Array [
Object {
@@ -1982,29 +1482,27 @@ Object {
],
"type": "string",
},
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "eventType": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .gen-ai 3`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "subAction": Object {
+ "severity": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
"rules": Array [
Object {
@@ -2016,23 +1514,6 @@ Object {
],
"type": "string",
},
- "subActionParams": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- "unknown": true,
- },
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
},
"preferences": Object {
"stripUnknown": Object {
@@ -2043,7 +1524,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .index 1`] = `
+exports[`Connector type config checks detect connector type changes for: .d3security 2`] = `
Object {
"flags": Object {
"default": Object {
@@ -2053,47 +1534,27 @@ Object {
"presence": "optional",
},
"keys": Object {
- "executionTimeField": Object {
+ "body": Object {
"flags": Object {
- "default": null,
+ "default": [Function],
"error": [Function],
"presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
+ "rules": Array [
Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
],
- "type": "alternatives",
+ "type": "string",
},
- "index": Object {
+ "eventType": Object {
"flags": Object {
+ "default": [Function],
"error": [Function],
+ "presence": "optional",
},
"rules": Array [
Object {
@@ -2105,32 +1566,23 @@ Object {
],
"type": "string",
},
- "refresh": Object {
+ "severity": Object {
"flags": Object {
- "default": false,
+ "default": [Function],
"error": [Function],
"presence": "optional",
},
- "type": "boolean",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
},
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .index 2`] = `
-Object {
- "flags": Object {
- "default": Object {},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {},
"preferences": Object {
"stripUnknown": Object {
"objects": false,
@@ -2140,7 +1592,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .index 3`] = `
+exports[`Connector type config checks detect connector type changes for: .d3security 3`] = `
Object {
"flags": Object {
"default": Object {
@@ -2150,91 +1602,19 @@ Object {
"presence": "optional",
},
"keys": Object {
- "documents": Object {
- "flags": Object {
- "error": [Function],
- },
- "items": Array [
- Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "key": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "value": Object {
- "flags": Object {
- "error": [Function],
- },
- "type": "any",
- },
- },
- "name": "entries",
- },
- ],
- "type": "record",
- },
- ],
- "type": "array",
- },
- "indexOverride": Object {
+ "url": Object {
"flags": Object {
- "default": null,
"error": [Function],
- "presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
+ "rules": Array [
Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
],
- "type": "alternatives",
+ "type": "string",
},
},
"preferences": Object {
@@ -2246,7 +1626,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .jira 1`] = `
+exports[`Connector type config checks detect connector type changes for: .d3security 4`] = `
Object {
"flags": Object {
"default": Object {
@@ -2256,21 +1636,7 @@ Object {
"presence": "optional",
},
"keys": Object {
- "apiUrl": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "projectKey": Object {
+ "token": Object {
"flags": Object {
"error": [Function],
},
@@ -2294,7 +1660,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .jira 2`] = `
+exports[`Connector type config checks detect connector type changes for: .d3security 5`] = `
Object {
"flags": Object {
"default": Object {
@@ -2304,7 +1670,7 @@ Object {
"presence": "optional",
},
"keys": Object {
- "apiToken": Object {
+ "subAction": Object {
"flags": Object {
"error": [Function],
},
@@ -2318,19 +1684,22 @@ Object {
],
"type": "string",
},
- "email": Object {
+ "subActionParams": Object {
"flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
"error": [Function],
+ "presence": "optional",
+ "unknown": true,
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
},
- ],
- "type": "string",
+ },
+ "type": "object",
},
},
"preferences": Object {
@@ -2342,70 +1711,103 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .jira 3`] = `
+exports[`Connector type config checks detect connector type changes for: .email 1`] = `
Object {
"flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
"error": [Function],
+ "presence": "optional",
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "subAction": Object {
- "allow": Array [
- "getFields",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- "subActionParams": Object {
+ "keys": Object {
+ "clientId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
},
- "type": "object",
+ "type": "any",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ ],
+ "type": "alternatives",
+ },
+ "from": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
- "type": "object",
+ ],
+ "type": "string",
+ },
+ "hasAuth": Object {
+ "flags": Object {
+ "default": true,
+ "error": [Function],
+ "presence": "optional",
},
+ "type": "boolean",
},
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "host": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "getIncident",
+ null,
],
"flags": Object {
"error": [Function],
@@ -2413,59 +1815,37 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "oauthTokenUrl": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "externalId": Object {
- "flags": Object {
- "error": [Function],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "name": "custom",
},
- },
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "handshake",
+ null,
],
"flags": Object {
"error": [Function],
@@ -2473,44 +1853,73 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "port": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "limit": 1,
+ },
+ "name": "min",
},
- },
- "type": "object",
+ Object {
+ "args": Object {
+ "limit": 65535,
+ },
+ "name": "max",
+ },
+ ],
+ "type": "number",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
},
- "type": "object",
- },
+ ],
+ "type": "alternatives",
},
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "secure": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "boolean",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "pushToService",
+ null,
],
"flags": Object {
"error": [Function],
@@ -2518,182 +1927,4063 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "service": Object {
+ "flags": Object {
+ "default": "other",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "tenantId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "comments": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "items": Array [
- Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "comment": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "commentId": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- ],
- "type": "array",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
+ "name": "custom",
},
- "incident": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .email 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "clientSecret": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "keys": Object {
- "description": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "externalId": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "issueType": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "password": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "user": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .email 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "bcc": Object {
+ "flags": Object {
+ "default": Array [],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "cc": Object {
+ "flags": Object {
+ "default": Array [],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "kibanaFooterLink": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "path": Object {
+ "flags": Object {
+ "default": "/",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "text": Object {
+ "flags": Object {
+ "default": "Go to Elastic",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ "message": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "messageHTML": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "subject": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "to": Object {
+ "flags": Object {
+ "default": Array [],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "body": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "body": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "body": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "stream": Object {
+ "flags": Object {
+ "default": false,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "boolean",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 4`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "dashboardId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 5`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "messages": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "content": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "role": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ ],
+ "type": "array",
+ },
+ "model": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "n": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "number",
+ },
+ "stop": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "temperature": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "number",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 6`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "messages": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "content": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "role": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ ],
+ "type": "array",
+ },
+ "model": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "n": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "number",
+ },
+ "stop": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "temperature": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "number",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 7`] = `
+Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiProvider": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "Azure OpenAI",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "apiUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiProvider": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "OpenAI",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "apiUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "defaultModel": Object {
+ "flags": Object {
+ "default": "gpt-4",
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ ],
+ "type": "alternatives",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 8`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiKey": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .gen-ai 9`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ "unknown": true,
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .index 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "executionTimeField": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "index": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "refresh": Object {
+ "flags": Object {
+ "default": false,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "boolean",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .index 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {},
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .index 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "documents": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "key": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "value": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "any",
+ },
+ },
+ "name": "entries",
+ },
+ ],
+ "type": "record",
+ },
+ ],
+ "type": "array",
+ },
+ "indexOverride": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .jira 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "projectKey": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .jira 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiToken": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "email": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .jira 3`] = `
+Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "getFields",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "getIncident",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "externalId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "handshake",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "pushToService",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "comments": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "comment": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "commentId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "incident": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "description": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "issueType": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "labels": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "parent": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "priority": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "summary": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "issueTypes",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "fieldsByIssueType",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "issues",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "title": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "issue",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ ],
+ "type": "alternatives",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .opsgenie 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "actions": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "limit": 10,
+ },
+ "name": "max",
+ },
+ ],
+ "type": "array",
+ },
+ "alias": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "description": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "details": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "key": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "value": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "name": "entries",
+ },
+ ],
+ "type": "record",
+ },
+ "entity": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "message": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "note": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "priority": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "P1",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "P2",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "P3",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "P4",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "P5",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "responders": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "name": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "type": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "team",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "user",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "escalation",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "schedule",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "type": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "team",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "user",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "escalation",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "schedule",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "type": Object {
+ "allow": Array [
+ "user",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "username": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ ],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "limit": 50,
+ },
+ "name": "max",
+ },
+ ],
+ "type": "array",
+ },
+ "source": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "tags": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "limit": 20,
+ },
+ "name": "max",
+ },
+ ],
+ "type": "array",
+ },
+ "user": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "visibleTo": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "name": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "type": Object {
+ "allow": Array [
+ "team",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "type": Object {
+ "allow": Array [
+ "team",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "type": Object {
+ "allow": Array [
+ "user",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "type": Object {
+ "allow": Array [
+ "user",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "username": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ ],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "limit": 50,
+ },
+ "name": "max",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .opsgenie 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "alias": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "note": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "source": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "user": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .opsgenie 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .opsgenie 4`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiKey": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .opsgenie 5`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ "unknown": true,
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .pagerduty 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiUrl": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .pagerduty 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "routingKey": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .pagerduty 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "class": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "component": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "customDetails": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "key": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "value": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "any",
+ },
+ },
+ "name": "entries",
+ },
+ ],
+ "type": "record",
+ },
+ "dedupKey": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "eventAction": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "trigger",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "resolve",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "acknowledge",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "group": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "links": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "href": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "text": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ ],
+ "type": "array",
+ },
+ "severity": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "critical",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "error",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "warning",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ "info",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "source": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "summary": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "timestamp": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .resilient 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiUrl": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "orgId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .resilient 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiKeyId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "apiKeySecret": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .resilient 3`] = `
+Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "getFields",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "getIncident",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "externalId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "handshake",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "pushToService",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "comments": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "comment": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "commentId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ ],
+ "type": "array",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "incident": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "description": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
},
"matches": Array [
Object {
@@ -2727,7 +6017,7 @@ Object {
],
"type": "alternatives",
},
- "labels": Object {
+ "externalId": Object {
"flags": Object {
"default": null,
"error": [Function],
@@ -2739,30 +6029,15 @@ Object {
"flags": Object {
"error": [Function],
},
- "items": Array [
+ "rules": Array [
Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
+ "args": Object {
+ "method": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
+ "name": "custom",
},
],
- "type": "array",
+ "type": "string",
},
},
Object {
@@ -2780,7 +6055,7 @@ Object {
],
"type": "alternatives",
},
- "parent": Object {
+ "incidentTypes": Object {
"flags": Object {
"default": null,
"error": [Function],
@@ -2792,15 +6067,16 @@ Object {
"flags": Object {
"error": [Function],
},
- "rules": Array [
+ "items": Array [
Object {
- "args": Object {
- "method": [Function],
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
},
- "name": "custom",
+ "type": "number",
},
],
- "type": "string",
+ "type": "array",
},
},
Object {
@@ -2818,7 +6094,21 @@ Object {
],
"type": "alternatives",
},
- "priority": Object {
+ "name": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "severityCode": Object {
"flags": Object {
"default": null,
"error": [Function],
@@ -2830,15 +6120,7 @@ Object {
"flags": Object {
"error": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
+ "type": "number",
},
},
Object {
@@ -2856,58 +6138,21710 @@ Object {
],
"type": "alternatives",
},
- "summary": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "incidentTypes",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "subAction": Object {
+ "allow": Array [
+ "severity",
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ "subActionParams": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {},
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ },
+ ],
+ "type": "alternatives",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "osTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "query": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ "unknown": true,
+ },
+ "keys": Object {
+ "parentTaskId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "K8SNodeLabels__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SNodeName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SType__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "accountIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentNamespace__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentPodName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "alertIds": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "appsVulnerabilityStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "appsVulnerabilityStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsRole__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSecurityGroups__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSubnetIds__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "azureResourceGroup__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudImage__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceSize__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudLocation__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudNetwork__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudProvider": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudTags__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "clusterName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__like": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "countsFor": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domainsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "encryptedApplications": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalIp__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filterId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredGroupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredSiteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "firewallEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gatewayIp": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gcpServiceAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "groupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "hasLocalConfiguration": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "ids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "infected": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isActive": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isDecommissioned": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isPendingUninstall": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUninstalled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUpToDate": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastLoggedInUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIdsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "migrationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationMode": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationModeSuspicious": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceGatewayMacAddress__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceInet__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfacePhysical__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkQuarantineEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osArch": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "query": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "siteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatContentHash": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatHidden": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatMitigationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatRebootRequired": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatResolved": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "userActionsNeeded": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 4`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "K8SNodeLabels__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SNodeName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SType__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "accountIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentNamespace__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentPodName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "alertIds": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "appsVulnerabilityStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "appsVulnerabilityStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsRole__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSecurityGroups__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSubnetIds__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "azureResourceGroup__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudImage__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceSize__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudLocation__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudNetwork__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudProvider": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudTags__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "clusterName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__like": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "countsFor": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domainsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "encryptedApplications": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalIp__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filterId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredGroupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredSiteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "firewallEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gatewayIp": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gcpServiceAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "groupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "hasLocalConfiguration": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "ids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "infected": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isActive": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isDecommissioned": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isPendingUninstall": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUninstalled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUpToDate": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastLoggedInUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIdsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "migrationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationMode": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationModeSuspicious": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceGatewayMacAddress__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceInet__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfacePhysical__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkQuarantineEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osArch": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "query": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "siteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatContentHash": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatHidden": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatMitigationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatRebootRequired": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatResolved": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "userActionsNeeded": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 5`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "K8SNodeLabels__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SNodeName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SType__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "accountIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentNamespace__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentPodName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "alertIds": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "appsVulnerabilityStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "appsVulnerabilityStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsRole__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSecurityGroups__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSubnetIds__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "azureResourceGroup__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudImage__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceSize__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudLocation__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudNetwork__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudProvider": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudTags__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "clusterName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__like": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "countsFor": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domainsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "encryptedApplications": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalIp__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filterId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredGroupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredSiteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "firewallEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gatewayIp": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gcpServiceAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "groupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "hasLocalConfiguration": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "ids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "infected": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isActive": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isDecommissioned": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isPendingUninstall": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUninstalled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUpToDate": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastLoggedInUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIdsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "migrationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationMode": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationModeSuspicious": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceGatewayMacAddress__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceInet__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfacePhysical__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkQuarantineEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osArch": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "query": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "scanStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "siteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatContentHash": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatHidden": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatMitigationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatRebootRequired": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "threatResolved": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "userActionsNeeded": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 6`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "K8SNodeLabels__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SNodeName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SType__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "K8SVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "accountIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "activeThreats__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adComputerQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserMember__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "adUserQuery__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentNamespace__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentPodName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "agentVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "alertIds": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "appsVulnerabilityStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "appsVulnerabilityStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsRole__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSecurityGroups__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "awsSubnetIds__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "azureResourceGroup__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudImage__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudInstanceSize__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudLocation__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudNetwork__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudProvider": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cloudTags__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "clusterName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "computerName__like": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "consoleMigrationStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "coreCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "countsFor": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "cpuCount__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "createdAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "decommissionedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "domainsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "encryptedApplications": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalId__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "externalIp__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filterId": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredGroupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "filteredSiteIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "firewallEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gatewayIp": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "gcpServiceAccount__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "groupIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "hasLocalConfiguration": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "ids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "infected": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "installerTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isActive": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isDecommissioned": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isPendingUninstall": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUninstalled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "isUpToDate": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastActiveDate__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "lastLoggedInUserName__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIds": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "locationIdsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "machineTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "migrationStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationMode": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "mitigationModeSuspicious": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceGatewayMacAddress__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfaceInet__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkInterfacePhysical__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkQuarantineEnabled": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "networkStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "operationalStatesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osArch": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypes": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osTypesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "osVersion__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "processName": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "query": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatus": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatuses": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "type": "object",
+ "name": "custom",
},
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerStatusesNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
},
- "type": "object",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
},
- "type": "object",
- },
+ ],
+ "type": "alternatives",
},
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "rangerVersions": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "issueTypes",
+ null,
],
"flags": Object {
"error": [Function],
@@ -2915,44 +27849,151 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "rangerVersionsNin": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
},
- "type": "object",
+ "type": "any",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
},
- "type": "object",
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
},
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
},
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "registeredAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "fieldsByIssueType",
+ null,
],
"flags": Object {
"error": [Function],
@@ -2960,59 +28001,37 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "id": Object {
- "flags": Object {
- "error": [Function],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "name": "custom",
},
- },
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "issues",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3020,59 +28039,37 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "registeredAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "title": Object {
- "flags": Object {
- "error": [Function],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "name": "custom",
},
- },
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "issue",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3080,181 +28077,163 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "remoteProfilingStates": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "id": Object {
- "flags": Object {
- "error": [Function],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "name": "custom",
},
- },
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ ],
+ "type": "string",
},
},
- "type": "object",
- },
- },
- ],
- "type": "alternatives",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .opsgenie 1`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiUrl": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .opsgenie 2`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "type": "alternatives",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiKey": Object {
+ "remoteProfilingStatesNin": Object {
"flags": Object {
+ "default": null,
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .opsgenie 3`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "type": "alternatives",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "subAction": Object {
+ "scanStatus": Object {
"flags": Object {
+ "default": null,
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "subActionParams": Object {
+ "scanStatuses": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
+ "default": null,
"error": [Function],
"presence": "optional",
- "unknown": true,
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
},
- },
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .pagerduty 1`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiUrl": Object {
+ "scanStatusesNin": Object {
"flags": Object {
"default": null,
"error": [Function],
@@ -3292,172 +28271,223 @@ Object {
],
"type": "alternatives",
},
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .pagerduty 2`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "routingKey": Object {
+ "siteIds": Object {
"flags": Object {
+ "default": null,
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .pagerduty 3`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "type": "alternatives",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "class": Object {
+ "threatContentHash": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "component": Object {
+ "threatCreatedAt__between": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "customDetails": Object {
+ "threatCreatedAt__gt": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "key": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
},
- "value": Object {
- "flags": Object {
- "error": [Function],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- "type": "any",
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
},
+ "type": "any",
},
- "name": "entries",
},
],
- "type": "record",
+ "type": "alternatives",
},
- "dedupKey": Object {
+ "threatCreatedAt__gte": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "name": "custom",
},
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "eventAction": Object {
+ "threatCreatedAt__lt": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
"matches": Array [
Object {
"schema": Object {
- "allow": Array [
- "trigger",
- ],
"flags": Object {
"error": [Function],
- "only": true,
},
- "type": "any",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
},
Object {
"schema": Object {
"allow": Array [
- "resolve",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3466,10 +28496,36 @@ Object {
"type": "any",
},
},
+ ],
+ "type": "alternatives",
+ },
+ "threatCreatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
Object {
"schema": Object {
"allow": Array [
- "acknowledge",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3481,100 +28537,109 @@ Object {
],
"type": "alternatives",
},
- "group": Object {
+ "threatHidden": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "links": Object {
+ "threatMitigationStatus": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "items": Array [
+ "matches": Array [
Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "href": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- ],
- "type": "string",
- },
- "text": Object {
- "flags": Object {
- "error": [Function],
+ "name": "custom",
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
+ ],
+ "type": "string",
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
},
+ "type": "any",
},
- "type": "object",
},
],
- "type": "array",
+ "type": "alternatives",
},
- "severity": Object {
+ "threatRebootRequired": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
"matches": Array [
Object {
"schema": Object {
- "allow": Array [
- "critical",
- ],
"flags": Object {
"error": [Function],
- "only": true,
},
- "type": "any",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
},
Object {
"schema": Object {
"allow": Array [
- "error",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3583,22 +28648,36 @@ Object {
"type": "any",
},
},
+ ],
+ "type": "alternatives",
+ },
+ "threatResolved": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
Object {
"schema": Object {
- "allow": Array [
- "warning",
- ],
"flags": Object {
"error": [Function],
- "only": true,
},
- "type": "any",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
},
Object {
"schema": Object {
"allow": Array [
- "info",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3610,193 +28689,109 @@ Object {
],
"type": "alternatives",
},
- "source": Object {
- "flags": Object {
- "default": [Function],
- "error": [Function],
- "presence": "optional",
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "summary": Object {
+ "totalMemory__between": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "name": "custom",
},
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "timestamp": Object {
+ "totalMemory__gt": Object {
"flags": Object {
- "default": [Function],
+ "default": null,
"error": [Function],
"presence": "optional",
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .resilient 1`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiUrl": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "orgId": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "name": "custom",
},
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .resilient 2`] = `
-Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "apiKeyId": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
Object {
- "args": Object {
- "method": [Function],
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
- "name": "custom",
},
],
- "type": "string",
+ "type": "alternatives",
},
- "apiKeySecret": Object {
+ "totalMemory__gte": Object {
"flags": Object {
+ "default": null,
"error": [Function],
+ "presence": "optional",
},
- "rules": Array [
+ "matches": Array [
Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
-}
-`;
-
-exports[`Connector type config checks detect connector type changes for: .resilient 3`] = `
-Object {
- "flags": Object {
- "error": [Function],
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "getFields",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3804,44 +28799,37 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- },
- "type": "object",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "getIncident",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3849,59 +28837,75 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "totalMemory__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "externalId": Object {
- "flags": Object {
- "error": [Function],
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "name": "custom",
},
- },
- "type": "object",
+ ],
+ "type": "string",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
},
- "type": "object",
- },
+ ],
+ "type": "alternatives",
},
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "updatedAt__between": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "handshake",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3909,44 +28913,75 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__gt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- },
- "type": "object",
+ ],
+ "type": "string",
},
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
},
},
- "type": "object",
- },
+ ],
+ "type": "alternatives",
},
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "updatedAt__gte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "subAction": Object {
+ Object {
+ "schema": Object {
"allow": Array [
- "pushToService",
+ null,
],
"flags": Object {
"error": [Function],
@@ -3954,381 +28989,532 @@ Object {
},
"type": "any",
},
- "subActionParams": Object {
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lt": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
"flags": Object {
- "default": Object {
- "special": "deep",
- },
"error": [Function],
- "presence": "optional",
},
- "keys": Object {
- "comments": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "items": Array [
- Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "comment": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "commentId": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
- },
- "type": "object",
- },
- ],
- "type": "array",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "incident": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
- },
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "description": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "externalId": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "incidentTypes": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "items": Array [
- Object {
- "flags": Object {
- "error": [Function],
- "presence": "optional",
- },
- "type": "number",
- },
- ],
- "type": "array",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
- "name": Object {
- "flags": Object {
- "error": [Function],
- },
- "rules": Array [
- Object {
- "args": Object {
- "method": [Function],
- },
- "name": "custom",
- },
- ],
- "type": "string",
- },
- "severityCode": Object {
- "flags": Object {
- "default": null,
- "error": [Function],
- "presence": "optional",
- },
- "matches": Array [
- Object {
- "schema": Object {
- "flags": Object {
- "error": [Function],
- },
- "type": "number",
- },
- },
- Object {
- "schema": Object {
- "allow": Array [
- null,
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
- },
- "type": "any",
- },
- },
- ],
- "type": "alternatives",
- },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
- },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "updatedAt__lte": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "type": "object",
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "userActionsNeeded": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuid__contains": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ "uuids": Object {
+ "flags": Object {
+ "default": null,
+ "error": [Function],
+ "presence": "optional",
+ },
+ "matches": Array [
+ Object {
+ "schema": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ Object {
+ "schema": Object {
+ "allow": Array [
+ null,
+ ],
+ "flags": Object {
+ "error": [Function],
+ "only": true,
+ },
+ "type": "any",
+ },
+ },
+ ],
+ "type": "alternatives",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .sentinelone 7`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "alertIds": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "items": Array [
+ Object {
+ "flags": Object {
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ ],
+ "type": "array",
+ },
+ "computerName": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "script": Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "apiKey": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ ],
+ "type": "string",
+ },
+ "inputParams": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
- "type": "object",
- },
+ ],
+ "type": "string",
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "outputDirectory": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "password": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
- "error": [Function],
- "presence": "optional",
- },
- "keys": Object {
- "subAction": Object {
- "allow": Array [
- "incidentTypes",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- "type": "any",
+ ],
+ "type": "string",
+ },
+ "passwordFromScope": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
- "subActionParams": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "keys": Object {
+ "scopeId": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
- "error": [Function],
- "presence": "optional",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "scopeLevel": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "type": "object",
},
- },
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
},
+ "type": "object",
},
- "type": "object",
- },
- },
- Object {
- "schema": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "requiresApproval": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
- "error": [Function],
- "presence": "optional",
+ "type": "boolean",
},
- "keys": Object {
- "subAction": Object {
- "allow": Array [
- "severity",
- ],
- "flags": Object {
- "error": [Function],
- "only": true,
+ "scriptId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
},
- "type": "any",
+ ],
+ "type": "string",
+ },
+ "scriptName": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
- "subActionParams": Object {
- "flags": Object {
- "default": Object {
- "special": "deep",
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
- "error": [Function],
- "presence": "optional",
+ "name": "custom",
},
- "keys": Object {},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ ],
+ "type": "string",
+ },
+ "scriptRuntimeTimeoutSeconds": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "type": "number",
+ },
+ "singularityxdrKeyword": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
},
+ "name": "custom",
},
- "type": "object",
+ ],
+ "type": "string",
+ },
+ "singularityxdrUrl": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
},
- "preferences": Object {
- "stripUnknown": Object {
- "objects": false,
+ "taskDescription": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
},
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
},
- "type": "object",
},
+ "type": "object",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
},
- ],
- "type": "alternatives",
+ },
+ "type": "object",
}
`;
-exports[`Connector type config checks detect connector type changes for: .sentinelone 1`] = `
+exports[`Connector type config checks detect connector type changes for: .sentinelone 8`] = `
Object {
"flags": Object {
"default": Object {
@@ -4362,7 +29548,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .sentinelone 2`] = `
+exports[`Connector type config checks detect connector type changes for: .sentinelone 9`] = `
Object {
"flags": Object {
"default": Object {
@@ -4396,7 +29582,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .sentinelone 3`] = `
+exports[`Connector type config checks detect connector type changes for: .sentinelone 10`] = `
Object {
"flags": Object {
"default": Object {
@@ -10068,6 +35254,270 @@ Object {
`;
exports[`Connector type config checks detect connector type changes for: .tines 1`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "storyId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "number",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .tines 2`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "body": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "webhook": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "number",
+ },
+ "name": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "path": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "secret": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "storyId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "number",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ "webhookUrl": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .tines 3`] = `
+Object {
+ "flags": Object {
+ "default": Object {
+ "special": "deep",
+ },
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "body": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "webhook": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "keys": Object {
+ "id": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "number",
+ },
+ "name": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "path": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "secret": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ "storyId": Object {
+ "flags": Object {
+ "error": [Function],
+ },
+ "type": "number",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+ },
+ "webhookUrl": Object {
+ "flags": Object {
+ "default": [Function],
+ "error": [Function],
+ "presence": "optional",
+ },
+ "rules": Array [
+ Object {
+ "args": Object {
+ "method": [Function],
+ },
+ "name": "custom",
+ },
+ ],
+ "type": "string",
+ },
+ },
+ "preferences": Object {
+ "stripUnknown": Object {
+ "objects": false,
+ },
+ },
+ "type": "object",
+}
+`;
+
+exports[`Connector type config checks detect connector type changes for: .tines 4`] = `
Object {
"flags": Object {
"default": Object {
@@ -10101,7 +35551,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .tines 2`] = `
+exports[`Connector type config checks detect connector type changes for: .tines 5`] = `
Object {
"flags": Object {
"default": Object {
@@ -10149,7 +35599,7 @@ Object {
}
`;
-exports[`Connector type config checks detect connector type changes for: .tines 3`] = `
+exports[`Connector type config checks detect connector type changes for: .tines 6`] = `
Object {
"flags": Object {
"default": Object {
diff --git a/x-pack/plugins/actions/server/integration_tests/connector_types.test.ts b/x-pack/plugins/actions/server/integration_tests/connector_types.test.ts
index 6a2382ea3088..32f878e87506 100644
--- a/x-pack/plugins/actions/server/integration_tests/connector_types.test.ts
+++ b/x-pack/plugins/actions/server/integration_tests/connector_types.test.ts
@@ -9,6 +9,9 @@ import type { TestElasticsearchUtils, TestKibanaUtils } from '@kbn/core-test-hel
import { ActionTypeRegistry } from '../action_type_registry';
import { setupTestServers } from './lib';
import { connectorTypes } from './mocks/connector_types';
+import { actionsConfigMock } from '../actions_config.mock';
+import { loggerMock } from '@kbn/logging-mocks';
+import { Services } from '../types';
jest.mock('../action_type_registry', () => {
const actual = jest.requireActual('../action_type_registry');
@@ -50,11 +53,34 @@ describe('Connector type config checks', () => {
for (const connectorTypeId of connectorTypes) {
test(`detect connector type changes for: ${connectorTypeId}`, async () => {
- const connectorType = actionTypeRegistry.get(connectorTypeId);
+ const {
+ getService,
+ validate: { config, params, secrets },
+ } = actionTypeRegistry.get(connectorTypeId);
- expect(connectorType?.validate.config.schema.getSchema!().describe()).toMatchSnapshot();
- expect(connectorType.validate.secrets.schema.getSchema!().describe()).toMatchSnapshot();
- expect(connectorType.validate.params.schema.getSchema!().describe()).toMatchSnapshot();
+ // SubActionConnector
+ if (getService) {
+ const subActions = getService({
+ config: {},
+ configurationUtilities: actionsConfigMock.create(),
+ connector: { id: 'foo', type: 'bar' },
+ logger: loggerMock.create(),
+ secrets: {},
+ services: {} as Services,
+ }).getSubActions();
+
+ subActions.forEach((subAction) => {
+ // @ts-ignore
+ if (subAction.schema?.getSchema) {
+ // @ts-ignore
+ expect(subAction.schema.getSchema().describe()).toMatchSnapshot();
+ }
+ });
+ }
+
+ expect(config.schema.getSchema!().describe()).toMatchSnapshot();
+ expect(secrets.schema.getSchema!().describe()).toMatchSnapshot();
+ expect(params.schema.getSchema!().describe()).toMatchSnapshot();
});
}
});
diff --git a/x-pack/plugins/actions/server/sub_action_framework/register.test.ts b/x-pack/plugins/actions/server/sub_action_framework/register.test.ts
index 59e71ffb69bf..200b9619eaef 100644
--- a/x-pack/plugins/actions/server/sub_action_framework/register.test.ts
+++ b/x-pack/plugins/actions/server/sub_action_framework/register.test.ts
@@ -60,6 +60,7 @@ describe('Registration', () => {
supportedFeatureIds: connector.supportedFeatureIds,
validate: expect.anything(),
executor: expect.any(Function),
+ getService: expect.any(Function),
renderParameterTemplates: expect.any(Function),
});
});
@@ -99,6 +100,7 @@ describe('Registration', () => {
supportedFeatureIds: connector.supportedFeatureIds,
validate: expect.anything(),
executor: expect.any(Function),
+ getService: expect.any(Function),
renderParameterTemplates: expect.any(Function),
isSystemActionType: true,
});
diff --git a/x-pack/plugins/actions/server/sub_action_framework/register.ts b/x-pack/plugins/actions/server/sub_action_framework/register.ts
index 0b8fe240c155..bfe2c5fffbbf 100644
--- a/x-pack/plugins/actions/server/sub_action_framework/register.ts
+++ b/x-pack/plugins/actions/server/sub_action_framework/register.ts
@@ -41,5 +41,6 @@ export const register = string[];
renderParameterTemplates?: RenderParameterTemplates;
executor: ExecutorType;
+ getService?: (params: ServiceParams) => SubActionConnector;
}
export interface RawAction extends Record {
diff --git a/x-pack/plugins/alerting/common/alert_schema/field_maps/mapping_from_field_map.test.ts b/x-pack/plugins/alerting/common/alert_schema/field_maps/mapping_from_field_map.test.ts
index ce4892215953..8718fcb2db59 100644
--- a/x-pack/plugins/alerting/common/alert_schema/field_maps/mapping_from_field_map.test.ts
+++ b/x-pack/plugins/alerting/common/alert_schema/field_maps/mapping_from_field_map.test.ts
@@ -211,6 +211,9 @@ describe('mappingFromFieldMap', () => {
case_ids: {
type: 'keyword',
},
+ consecutive_matches: {
+ type: 'long',
+ },
duration: {
properties: {
us: {
diff --git a/x-pack/plugins/alerting/server/alerts_client/alerts_client.test.ts b/x-pack/plugins/alerting/server/alerts_client/alerts_client.test.ts
index 81848c3e6568..dcebb07009af 100644
--- a/x-pack/plugins/alerting/server/alerts_client/alerts_client.test.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/alerts_client.test.ts
@@ -15,6 +15,7 @@ import {
} from '../types';
import {
ALERT_ACTION_GROUP,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_DURATION,
ALERT_END,
ALERT_FLAPPING,
@@ -154,6 +155,7 @@ const fetchedAlert1 = {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_DURATION]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true],
@@ -184,6 +186,7 @@ const fetchedAlert2 = {
[EVENT_ACTION]: 'active',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_DURATION]: 36000000000,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true, false],
@@ -214,6 +217,7 @@ const getNewIndexedAlertDoc = (overrides = {}) => ({
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 1,
[ALERT_DURATION]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true],
@@ -260,6 +264,7 @@ const getRecoveredIndexedAlertDoc = (overrides = {}) => ({
[ALERT_END]: date,
[ALERT_TIME_RANGE]: { gte: '2023-03-28T12:27:28.159Z', lte: date },
[ALERT_STATUS]: 'recovered',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
...overrides,
});
@@ -670,6 +675,7 @@ describe('Alerts Client', () => {
[TIMESTAMP]: date,
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 1,
[ALERT_DURATION]: 36000000000,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true, false],
@@ -777,7 +783,7 @@ describe('Alerts Client', () => {
},
},
// ongoing alert doc
- getOngoingIndexedAlertDoc({ [ALERT_UUID]: 'abc' }),
+ getOngoingIndexedAlertDoc({ [ALERT_UUID]: 'abc', [ALERT_CONSECUTIVE_MATCHES]: 0 }),
],
});
});
@@ -950,6 +956,7 @@ describe('Alerts Client', () => {
[TIMESTAMP]: date,
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 1,
[ALERT_DURATION]: 72000000000,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true, false, false, false],
@@ -997,6 +1004,7 @@ describe('Alerts Client', () => {
[TIMESTAMP]: date,
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'recovered',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_DURATION]: 36000000000,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true, true],
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.test.ts b/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.test.ts
index 2da67f584e93..47c4e9e5f4f5 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.test.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.test.ts
@@ -25,6 +25,7 @@ import {
TIMESTAMP,
VERSION,
ALERT_TIME_RANGE,
+ ALERT_CONSECUTIVE_MATCHES,
} from '@kbn/rule-data-utils';
import { alertRule } from './test_fixtures';
@@ -46,6 +47,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_INSTANCE_ID]: 'alert-A',
@@ -77,6 +79,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_INSTANCE_ID]: 'alert-A',
@@ -112,6 +115,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true, false, false, false, true, true],
[ALERT_INSTANCE_ID]: 'alert-A',
@@ -152,6 +156,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_INSTANCE_ID]: 'alert-A',
@@ -197,6 +202,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_INSTANCE_ID]: 'alert-A',
@@ -247,6 +253,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_INSTANCE_ID]: 'alert-A',
@@ -299,6 +306,7 @@ describe('buildNewAlert', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_INSTANCE_ID]: 'alert-A',
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.ts b/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.ts
index 4af3e3f93817..911c0cc8c6c9 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/build_new_alert.ts
@@ -14,6 +14,7 @@ import {
ALERT_FLAPPING_HISTORY,
ALERT_INSTANCE_ID,
ALERT_MAINTENANCE_WINDOW_IDS,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_RULE_TAGS,
ALERT_START,
ALERT_STATUS,
@@ -86,6 +87,7 @@ export const buildNewAlert = <
[ALERT_FLAPPING_HISTORY]: legacyAlert.getFlappingHistory(),
[ALERT_INSTANCE_ID]: legacyAlert.getId(),
[ALERT_MAINTENANCE_WINDOW_IDS]: legacyAlert.getMaintenanceWindowIds(),
+ [ALERT_CONSECUTIVE_MATCHES]: legacyAlert.getActiveCount(),
[ALERT_STATUS]: 'active',
[ALERT_UUID]: legacyAlert.getUuid(),
[ALERT_WORKFLOW_STATUS]: get(cleanedPayload, ALERT_WORKFLOW_STATUS, 'open'),
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.test.ts b/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.test.ts
index 2c4fc087a474..7e76a829d0d3 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.test.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.test.ts
@@ -26,6 +26,7 @@ import {
TIMESTAMP,
VERSION,
ALERT_TIME_RANGE,
+ ALERT_CONSECUTIVE_MATCHES,
} from '@kbn/rule-data-utils';
import { alertRule, existingFlattenedNewAlert, existingExpandedNewAlert } from './test_fixtures';
@@ -55,6 +56,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -114,6 +116,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -190,6 +193,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'error',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [false, false, true, true],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-xyz'],
@@ -279,6 +283,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -375,6 +380,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -475,6 +481,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -555,6 +562,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -653,6 +661,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'active',
[ALERT_ACTION_GROUP]: 'warning',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.ts b/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.ts
index ec4eae47d6e8..8d1be2e75ecb 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/build_ongoing_alert.ts
@@ -9,6 +9,7 @@ import deepmerge from 'deepmerge';
import type { Alert } from '@kbn/alerts-as-data-utils';
import {
ALERT_ACTION_GROUP,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_DURATION,
ALERT_FLAPPING,
ALERT_FLAPPING_HISTORY,
@@ -93,6 +94,8 @@ export const buildOngoingAlert = <
[ALERT_FLAPPING_HISTORY]: legacyAlert.getFlappingHistory(),
// Set latest maintenance window IDs
[ALERT_MAINTENANCE_WINDOW_IDS]: legacyAlert.getMaintenanceWindowIds(),
+ // Set latest match count
+ [ALERT_CONSECUTIVE_MATCHES]: legacyAlert.getActiveCount(),
// Set the time range
...(legacyAlert.getState().start
? {
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.test.ts b/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.test.ts
index c8a145487003..3b4f23ac7cb4 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.test.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.test.ts
@@ -27,6 +27,7 @@ import {
VERSION,
ALERT_TIME_RANGE,
ALERT_END,
+ ALERT_CONSECUTIVE_MATCHES,
} from '@kbn/rule-data-utils';
import {
alertRule,
@@ -63,6 +64,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'recovered',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
@@ -127,6 +129,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'NoLongerActive',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-1', 'maint-321'],
@@ -221,6 +224,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'NoLongerActive',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-1', 'maint-321'],
@@ -323,6 +327,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'NoLongerActive',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-1', 'maint-321'],
@@ -423,6 +428,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'NoLongerActive',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-1', 'maint-321'],
@@ -522,6 +528,7 @@ for (const flattened of [true, false]) {
[TIMESTAMP]: '2023-03-29T12:27:28.159Z',
[EVENT_ACTION]: 'close',
[ALERT_ACTION_GROUP]: 'NoLongerActive',
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [],
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.ts b/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.ts
index 74bebca1bb95..46f36c9715e1 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/build_recovered_alert.ts
@@ -22,6 +22,7 @@ import {
ALERT_END,
ALERT_TIME_RANGE,
ALERT_START,
+ ALERT_CONSECUTIVE_MATCHES,
} from '@kbn/rule-data-utils';
import { DeepPartial } from '@kbn/utility-types';
import { Alert as LegacyAlert } from '../../alert/alert';
@@ -92,6 +93,8 @@ export const buildRecoveredAlert = <
[ALERT_FLAPPING_HISTORY]: legacyAlert.getFlappingHistory(),
// Set latest maintenance window IDs
[ALERT_MAINTENANCE_WINDOW_IDS]: legacyAlert.getMaintenanceWindowIds(),
+ // Set latest match count, should be 0
+ [ALERT_CONSECUTIVE_MATCHES]: legacyAlert.getActiveCount(),
// Set status to 'recovered'
[ALERT_STATUS]: 'recovered',
// Set latest duration as recovered alerts should have updated duration
diff --git a/x-pack/plugins/alerting/server/alerts_client/lib/test_fixtures.ts b/x-pack/plugins/alerting/server/alerts_client/lib/test_fixtures.ts
index 1a8e2be1e16a..096d8ab6a39a 100644
--- a/x-pack/plugins/alerting/server/alerts_client/lib/test_fixtures.ts
+++ b/x-pack/plugins/alerting/server/alerts_client/lib/test_fixtures.ts
@@ -22,6 +22,7 @@ import {
ALERT_FLAPPING_HISTORY,
ALERT_INSTANCE_ID,
ALERT_MAINTENANCE_WINDOW_IDS,
+ ALERT_CONSECUTIVE_MATCHES,
ALERT_STATUS,
ALERT_UUID,
ALERT_WORKFLOW_STATUS,
@@ -80,6 +81,7 @@ export const existingFlattenedNewAlert = {
[ALERT_FLAPPING_HISTORY]: [true],
[ALERT_INSTANCE_ID]: 'alert-A',
[ALERT_MAINTENANCE_WINDOW_IDS]: [],
+ [ALERT_CONSECUTIVE_MATCHES]: 1,
[ALERT_STATUS]: 'active',
[ALERT_START]: '2023-03-28T12:27:28.159Z',
[ALERT_TIME_RANGE]: { gte: '2023-03-28T12:27:28.159Z' },
@@ -98,6 +100,7 @@ export const existingFlattenedActiveAlert = {
[ALERT_DURATION]: '3600',
[ALERT_FLAPPING_HISTORY]: [true, false],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-x'],
+ [ALERT_CONSECUTIVE_MATCHES]: 2,
};
export const existingFlattenedRecoveredAlert = {
@@ -110,6 +113,7 @@ export const existingFlattenedRecoveredAlert = {
[ALERT_TIME_RANGE]: { gte: '2023-03-27T12:27:28.159Z', lte: '2023-03-30T12:27:28.159Z' },
[ALERT_FLAPPING_HISTORY]: [true, false, false, true],
[ALERT_MAINTENANCE_WINDOW_IDS]: ['maint-x'],
+ [ALERT_CONSECUTIVE_MATCHES]: 0,
[ALERT_STATUS]: 'recovered',
};
diff --git a/x-pack/plugins/alerting/server/integration_tests/__snapshots__/alert_as_data_fields.test.ts.snap b/x-pack/plugins/alerting/server/integration_tests/__snapshots__/alert_as_data_fields.test.ts.snap
index 1953ec8176be..06f4835d20f7 100644
--- a/x-pack/plugins/alerting/server/integration_tests/__snapshots__/alert_as_data_fields.test.ts.snap
+++ b/x-pack/plugins/alerting/server/integration_tests/__snapshots__/alert_as_data_fields.test.ts.snap
@@ -747,6 +747,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -1794,6 +1799,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -2841,6 +2851,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -3888,6 +3903,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -4935,6 +4955,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -5988,6 +6013,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -7035,6 +7065,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
@@ -8082,6 +8117,11 @@ Object {
"required": false,
"type": "keyword",
},
+ "kibana.alert.consecutive_matches": Object {
+ "array": false,
+ "required": false,
+ "type": "long",
+ },
"kibana.alert.depth": Object {
"array": false,
"required": true,
diff --git a/x-pack/plugins/alerting/server/task_runner/execution_handler.ts b/x-pack/plugins/alerting/server/task_runner/execution_handler.ts
index ec690bb8ba0f..a1af1dccb992 100644
--- a/x-pack/plugins/alerting/server/task_runner/execution_handler.ts
+++ b/x-pack/plugins/alerting/server/task_runner/execution_handler.ts
@@ -319,6 +319,7 @@ export class ExecutionHandler<
actionParams: action.params,
flapping: executableAlert.getFlapping(),
ruleUrl: ruleUrl?.absoluteUrl,
+ consecutiveMatches: executableAlert.getActiveCount(),
};
if (executableAlert.isAlertAsData()) {
diff --git a/x-pack/plugins/alerting/server/task_runner/task_runner_alerts_client.test.ts b/x-pack/plugins/alerting/server/task_runner/task_runner_alerts_client.test.ts
index 4274c320126d..246215ba9a15 100644
--- a/x-pack/plugins/alerting/server/task_runner/task_runner_alerts_client.test.ts
+++ b/x-pack/plugins/alerting/server/task_runner/task_runner_alerts_client.test.ts
@@ -96,6 +96,7 @@ import {
SPACE_IDS,
TAGS,
VERSION,
+ ALERT_CONSECUTIVE_MATCHES,
} from '@kbn/rule-data-utils';
jest.mock('uuid', () => ({
@@ -554,6 +555,7 @@ describe('Task Runner', () => {
[EVENT_ACTION]: 'open',
[EVENT_KIND]: 'signal',
[ALERT_ACTION_GROUP]: 'default',
+ [ALERT_CONSECUTIVE_MATCHES]: 1,
[ALERT_DURATION]: 0,
[ALERT_FLAPPING]: false,
[ALERT_FLAPPING_HISTORY]: [true],
diff --git a/x-pack/plugins/alerting/server/task_runner/transform_action_params.test.ts b/x-pack/plugins/alerting/server/task_runner/transform_action_params.test.ts
index ae60d5dd50f5..c343411d494b 100644
--- a/x-pack/plugins/alerting/server/task_runner/transform_action_params.test.ts
+++ b/x-pack/plugins/alerting/server/task_runner/transform_action_params.test.ts
@@ -789,6 +789,37 @@ describe('transformActionParams', () => {
}
`);
});
+
+ test('consecutive matches is passed to templates', () => {
+ const actionParams = {
+ message: 'Value "{{alert.consecutiveMatches}}" exists',
+ };
+ const result = transformActionParams({
+ actionsPlugin,
+ actionTypeId,
+ actionParams,
+ state: {},
+ context: {},
+ alertId: '1',
+ alertType: 'rule-type-id',
+ actionId: 'action-id',
+ alertName: 'alert-name',
+ tags: ['tag-A', 'tag-B'],
+ spaceId: 'spaceId-A',
+ alertInstanceId: '2',
+ alertUuid: 'uuid-1',
+ alertActionGroup: 'action-group',
+ alertActionGroupName: 'Action Group',
+ alertParams: {},
+ flapping: true,
+ consecutiveMatches: 4,
+ });
+ expect(result).toMatchInlineSnapshot(`
+ Object {
+ "message": "Value \\"4\\" exists",
+ }
+ `);
+ });
});
describe('transformSummaryActionParams', () => {
diff --git a/x-pack/plugins/alerting/server/task_runner/transform_action_params.ts b/x-pack/plugins/alerting/server/task_runner/transform_action_params.ts
index 2e215889291f..65fa3dae5f89 100644
--- a/x-pack/plugins/alerting/server/task_runner/transform_action_params.ts
+++ b/x-pack/plugins/alerting/server/task_runner/transform_action_params.ts
@@ -37,6 +37,7 @@ export interface TransformActionParamsOptions {
ruleUrl?: string;
flapping: boolean;
aadAlert?: AADAlert;
+ consecutiveMatches?: number;
}
interface SummarizedAlertsWithAll {
@@ -79,6 +80,7 @@ export function transformActionParams({
ruleUrl,
flapping,
aadAlert,
+ consecutiveMatches,
}: TransformActionParamsOptions): RuleActionParams {
// when the list of variables we pass in here changes,
// the UI will need to be updated as well; see:
@@ -111,6 +113,7 @@ export function transformActionParams({
actionGroup: alertActionGroup,
actionGroupName: alertActionGroupName,
flapping,
+ consecutiveMatches,
},
...(aadAlert ? { ...aadAlert } : {}),
};
@@ -161,6 +164,7 @@ export function transformSummaryActionParams({
actionGroup: 'default',
actionGroupName: 'Default',
flapping: false,
+ consecutiveMatches: 0,
},
kibanaBaseUrl,
date: new Date().toISOString(),
diff --git a/x-pack/plugins/canvas/canvas_plugin_src/renderers/filters/advanced_filter/component/index.ts b/x-pack/plugins/canvas/canvas_plugin_src/renderers/filters/advanced_filter/component/index.ts
index 6840bb6a5953..f3d4900aa6f1 100644
--- a/x-pack/plugins/canvas/canvas_plugin_src/renderers/filters/advanced_filter/component/index.ts
+++ b/x-pack/plugins/canvas/canvas_plugin_src/renderers/filters/advanced_filter/component/index.ts
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { compose, withState } from 'recompose';
+import { compose, withState } from 'react-recompose';
import { AdvancedFilter as Component, Props as ComponentProps } from './advanced_filter';
export interface Props {
diff --git a/x-pack/plugins/canvas/public/components/element_wrapper/index.js b/x-pack/plugins/canvas/public/components/element_wrapper/index.js
index e4fa03d5ee7a..1dfa5b9b546c 100644
--- a/x-pack/plugins/canvas/public/components/element_wrapper/index.js
+++ b/x-pack/plugins/canvas/public/components/element_wrapper/index.js
@@ -7,7 +7,7 @@
import PropTypes from 'prop-types';
import { connectAdvanced } from 'react-redux';
-import { compose, withPropsOnChange, mapProps } from 'recompose';
+import { compose, withPropsOnChange, mapProps } from 'react-recompose';
import isEqual from 'react-fast-compare';
import { getResolvedArgs, getSelectedPage } from '../../state/selectors/workpad';
import { getState, getValue } from '../../lib/resolved_arg';
diff --git a/x-pack/plugins/canvas/public/components/enhance/error_boundary.tsx b/x-pack/plugins/canvas/public/components/enhance/error_boundary.tsx
index 02e8b9560d52..a1220b30a29f 100644
--- a/x-pack/plugins/canvas/public/components/enhance/error_boundary.tsx
+++ b/x-pack/plugins/canvas/public/components/enhance/error_boundary.tsx
@@ -6,7 +6,7 @@
*/
import React, { ErrorInfo, FC, ReactElement } from 'react';
-import { withState, withHandlers, lifecycle, mapProps, compose } from 'recompose';
+import { withState, withHandlers, lifecycle, mapProps, compose } from 'react-recompose';
import PropTypes from 'prop-types';
import { omit } from 'lodash';
diff --git a/x-pack/plugins/canvas/public/components/function_form_list/index.js b/x-pack/plugins/canvas/public/components/function_form_list/index.js
index 31db3366ce3b..0ad6651e3f57 100644
--- a/x-pack/plugins/canvas/public/components/function_form_list/index.js
+++ b/x-pack/plugins/canvas/public/components/function_form_list/index.js
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { compose, withProps } from 'recompose';
+import { compose, withProps } from 'react-recompose';
import { get } from 'lodash';
import { toExpression } from '@kbn/interpreter';
import { pluginServices } from '../../services';
diff --git a/x-pack/plugins/canvas/public/components/tag_list/index.tsx b/x-pack/plugins/canvas/public/components/tag_list/index.tsx
index d201875bf339..9e51758dfd36 100644
--- a/x-pack/plugins/canvas/public/components/tag_list/index.tsx
+++ b/x-pack/plugins/canvas/public/components/tag_list/index.tsx
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { compose, withProps } from 'recompose';
+import { compose, withProps } from 'react-recompose';
import { tagsRegistry } from '../../lib/tags_registry';
import { TagList as Component, Props as ComponentProps } from './tag_list';
import { TagSpec } from '../../lib/tag';
diff --git a/x-pack/plugins/canvas/public/components/tool_tip_shortcut/index.tsx b/x-pack/plugins/canvas/public/components/tool_tip_shortcut/index.tsx
index 169b8fc1f59a..6bd487a2b779 100644
--- a/x-pack/plugins/canvas/public/components/tool_tip_shortcut/index.tsx
+++ b/x-pack/plugins/canvas/public/components/tool_tip_shortcut/index.tsx
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { compose, mapProps } from 'recompose';
+import { compose, mapProps } from 'react-recompose';
import { ToolTipShortcut as Component, Props as ComponentProps } from './tool_tip_shortcut';
import { getClientPlatform } from '../../lib/get_client_platform';
import { keymap } from '../../lib/keymap';
diff --git a/x-pack/plugins/canvas/public/components/workpad_header/edit_menu/edit_menu.tsx b/x-pack/plugins/canvas/public/components/workpad_header/edit_menu/edit_menu.tsx
index 42d24770462a..2314f9c3f77b 100644
--- a/x-pack/plugins/canvas/public/components/workpad_header/edit_menu/edit_menu.tsx
+++ b/x-pack/plugins/canvas/public/components/workpad_header/edit_menu/edit_menu.tsx
@@ -7,7 +7,7 @@
import React, { FC, useContext } from 'react';
import { connect } from 'react-redux';
-import { compose, withHandlers, withProps } from 'recompose';
+import { compose, withHandlers, withProps } from 'react-recompose';
import { Dispatch } from 'redux';
import { State, PositionedElement } from '../../../../types';
import { getClipboardData } from '../../../lib/clipboard';
diff --git a/x-pack/plugins/canvas/public/components/workpad_header/fullscreen_control/index.js b/x-pack/plugins/canvas/public/components/workpad_header/fullscreen_control/index.js
index 14baf1db583a..e2946e4a5808 100644
--- a/x-pack/plugins/canvas/public/components/workpad_header/fullscreen_control/index.js
+++ b/x-pack/plugins/canvas/public/components/workpad_header/fullscreen_control/index.js
@@ -8,7 +8,7 @@
import React, { useContext, useCallback } from 'react';
import { connect, useDispatch } from 'react-redux';
import PropTypes from 'prop-types';
-import { withState, withProps, withHandlers, compose, getContext } from 'recompose';
+import { withState, withProps, withHandlers, compose, getContext } from 'react-recompose';
import { selectToplevelNodes } from '../../../state/actions/transient';
import { getSelectedPageIndex, getPages, getWorkpad } from '../../../state/selectors/workpad';
import { trackCanvasUiMetric, METRIC_TYPE } from '../../../lib/ui_metric';
diff --git a/x-pack/plugins/canvas/public/components/workpad_header/view_menu/view_menu.tsx b/x-pack/plugins/canvas/public/components/workpad_header/view_menu/view_menu.tsx
index 7b9c5b767aba..e5ee802e4816 100644
--- a/x-pack/plugins/canvas/public/components/workpad_header/view_menu/view_menu.tsx
+++ b/x-pack/plugins/canvas/public/components/workpad_header/view_menu/view_menu.tsx
@@ -6,7 +6,7 @@
*/
import React, { FC, useCallback, useContext } from 'react';
import { connect, useDispatch } from 'react-redux';
-import { compose, withHandlers } from 'recompose';
+import { compose, withHandlers } from 'react-recompose';
import { Dispatch } from 'redux';
import { zoomHandlerCreators } from '../../../lib/app_handler_creators';
import { State, CanvasWorkpadBoundingBox } from '../../../../types';
diff --git a/x-pack/plugins/canvas/public/components/workpad_page/index.js b/x-pack/plugins/canvas/public/components/workpad_page/index.js
index 6839dc0a128e..7cf8bc082318 100644
--- a/x-pack/plugins/canvas/public/components/workpad_page/index.js
+++ b/x-pack/plugins/canvas/public/components/workpad_page/index.js
@@ -9,7 +9,7 @@ import React, { useContext } from 'react';
import isEqual from 'react-fast-compare';
import { connect } from 'react-redux';
import PropTypes from 'prop-types';
-import { branch, compose, shouldUpdate, withProps } from 'recompose';
+import { branch, compose, shouldUpdate, withProps } from 'react-recompose';
import { canUserWrite } from '../../state/selectors/app';
import { getNodes, getPageById, isWriteable } from '../../state/selectors/workpad';
import { not } from '../../lib/aeroelastic/functional';
diff --git a/x-pack/plugins/canvas/public/components/workpad_page/integration_utils.js b/x-pack/plugins/canvas/public/components/workpad_page/integration_utils.js
index 804c9f50cd78..25e0280e58a0 100644
--- a/x-pack/plugins/canvas/public/components/workpad_page/integration_utils.js
+++ b/x-pack/plugins/canvas/public/components/workpad_page/integration_utils.js
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { shallowEqual } from 'recompose';
+import { shallowEqual } from 'react-recompose';
import { getNodes, getSelectedPage } from '../../state/selectors/workpad';
import { addElement, removeElements, setMultiplePositions } from '../../state/actions/elements';
import { selectToplevelNodes } from '../../state/actions/transient';
diff --git a/x-pack/plugins/canvas/public/components/workpad_page/workpad_interactive_page/index.js b/x-pack/plugins/canvas/public/components/workpad_page/workpad_interactive_page/index.js
index 25e64091f4ae..e304ca905a86 100644
--- a/x-pack/plugins/canvas/public/components/workpad_page/workpad_interactive_page/index.js
+++ b/x-pack/plugins/canvas/public/components/workpad_page/workpad_interactive_page/index.js
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { compose, lifecycle, withHandlers, withProps, withState } from 'recompose';
+import { compose, lifecycle, withHandlers, withProps, withState } from 'react-recompose';
import { connect } from 'react-redux';
import { createStore } from '../../../lib/aeroelastic/store';
import { updater } from '../../../lib/aeroelastic/layout';
diff --git a/x-pack/plugins/canvas/public/components/workpad_page/workpad_static_page/index.js b/x-pack/plugins/canvas/public/components/workpad_page/workpad_static_page/index.js
index 6fd3d1b0c172..bce43f50cfae 100644
--- a/x-pack/plugins/canvas/public/components/workpad_page/workpad_static_page/index.js
+++ b/x-pack/plugins/canvas/public/components/workpad_page/workpad_static_page/index.js
@@ -5,7 +5,7 @@
* 2.0.
*/
-import { withProps } from 'recompose';
+import { withProps } from 'react-recompose';
import { simplePositioning } from '../positioning_utils';
import { StaticWorkpadPage } from './static_workpad_page';
diff --git a/x-pack/plugins/canvas/public/components/workpad_shortcuts/index.tsx b/x-pack/plugins/canvas/public/components/workpad_shortcuts/index.tsx
index 9b3dfb574f00..8b891b2c302b 100644
--- a/x-pack/plugins/canvas/public/components/workpad_shortcuts/index.tsx
+++ b/x-pack/plugins/canvas/public/components/workpad_shortcuts/index.tsx
@@ -6,7 +6,7 @@
*/
import PropTypes from 'prop-types';
-import { withHandlers, compose } from 'recompose';
+import { withHandlers, compose } from 'react-recompose';
import { WorkpadShortcuts as Component, Props as WorkpadShortcutsProps } from './workpad_shortcuts';
import {
groupHandlerCreators,
diff --git a/x-pack/plugins/canvas/public/expression_types/arg_types/container_style/index.ts b/x-pack/plugins/canvas/public/expression_types/arg_types/container_style/index.ts
index 0aaa9a2b5b92..e2fcef008139 100644
--- a/x-pack/plugins/canvas/public/expression_types/arg_types/container_style/index.ts
+++ b/x-pack/plugins/canvas/public/expression_types/arg_types/container_style/index.ts
@@ -6,7 +6,7 @@
*/
import { ComponentType } from 'react';
-import { withHandlers } from 'recompose';
+import { withHandlers } from 'react-recompose';
import immutable from 'object-path-immutable';
import { get } from 'lodash';
import { templateFromReactComponent } from '../../../lib/template_from_react_component';
diff --git a/x-pack/plugins/canvas/public/expression_types/arg_types/series_style/index.ts b/x-pack/plugins/canvas/public/expression_types/arg_types/series_style/index.ts
index 0c6aacb8b76b..140919ed29c0 100644
--- a/x-pack/plugins/canvas/public/expression_types/arg_types/series_style/index.ts
+++ b/x-pack/plugins/canvas/public/expression_types/arg_types/series_style/index.ts
@@ -6,7 +6,7 @@
*/
import PropTypes from 'prop-types';
-import { lifecycle, compose } from 'recompose';
+import { lifecycle, compose } from 'react-recompose';
import { get } from 'lodash';
import { templateFromReactComponent } from '../../../lib/template_from_react_component';
import { SimpleTemplate } from './simple_template';
diff --git a/x-pack/plugins/canvas/shareable_runtime/components/__snapshots__/app.test.tsx.snap b/x-pack/plugins/canvas/shareable_runtime/components/__snapshots__/app.test.tsx.snap
index 4b483b69445e..cb3c549ed06d 100644
--- a/x-pack/plugins/canvas/shareable_runtime/components/__snapshots__/app.test.tsx.snap
+++ b/x-pack/plugins/canvas/shareable_runtime/components/__snapshots__/app.test.tsx.snap
@@ -1,3 +1,3 @@
// Jest Snapshot v1, https://goo.gl/fbAQLP
-exports[` App renders properly 1`] = `"There is a new region landmark with page level controls at the end of the document.
"`;
+exports[` App renders properly 1`] = `"There is a new region landmark with page level controls at the end of the document.
"`;
diff --git a/x-pack/plugins/cases/common/ui/types.ts b/x-pack/plugins/cases/common/ui/types.ts
index a6e747ac6e85..3854c14c79de 100644
--- a/x-pack/plugins/cases/common/ui/types.ts
+++ b/x-pack/plugins/cases/common/ui/types.ts
@@ -119,7 +119,7 @@ export interface ResolvedCase {
export type CasesConfigurationUI = Pick<
SnakeToCamelCase,
- 'closureType' | 'connector' | 'mappings' | 'customFields' | 'id' | 'version'
+ 'closureType' | 'connector' | 'mappings' | 'customFields' | 'id' | 'version' | 'owner'
>;
export type CasesConfigurationUICustomField = CasesConfigurationUI['customFields'][number];
diff --git a/x-pack/plugins/cases/public/components/all_cases/columns_popover.test.tsx b/x-pack/plugins/cases/public/components/all_cases/columns_popover.test.tsx
index 4d6eb887c86d..27f94319ecbc 100644
--- a/x-pack/plugins/cases/public/components/all_cases/columns_popover.test.tsx
+++ b/x-pack/plugins/cases/public/components/all_cases/columns_popover.test.tsx
@@ -14,8 +14,7 @@ import type { AppMockRenderer } from '../../common/mock';
import { createAppMockRenderer } from '../../common/mock';
import { ColumnsPopover } from './columns_popover';
-// FLAKY: https://github.com/elastic/kibana/issues/174682
-describe.skip('ColumnsPopover', () => {
+describe('ColumnsPopover', () => {
let appMockRenderer: AppMockRenderer;
beforeEach(() => {
diff --git a/x-pack/plugins/cases/public/components/all_cases/status_filter.test.tsx b/x-pack/plugins/cases/public/components/all_cases/status_filter.test.tsx
index 66e8eca5b078..3dac9d201ced 100644
--- a/x-pack/plugins/cases/public/components/all_cases/status_filter.test.tsx
+++ b/x-pack/plugins/cases/public/components/all_cases/status_filter.test.tsx
@@ -19,8 +19,7 @@ const LABELS = {
inProgress: i18n.STATUS_IN_PROGRESS,
};
-// FLAKY: https://github.com/elastic/kibana/issues/177334
-describe.skip('StatusFilter', () => {
+describe('StatusFilter', () => {
const onChange = jest.fn();
const defaultProps = {
selectedOptionKeys: [],
diff --git a/x-pack/plugins/cases/public/components/case_view/components/suggest_users_popover.test.tsx b/x-pack/plugins/cases/public/components/case_view/components/suggest_users_popover.test.tsx
index d84675d8e788..479b8e39d232 100644
--- a/x-pack/plugins/cases/public/components/case_view/components/suggest_users_popover.test.tsx
+++ b/x-pack/plugins/cases/public/components/case_view/components/suggest_users_popover.test.tsx
@@ -18,9 +18,7 @@ import type { AssigneeWithProfile } from '../../user_profiles/types';
jest.mock('../../../containers/user_profiles/api');
-// FLAKY: https://github.com/elastic/kibana/issues/171600
-// FLAKY: https://github.com/elastic/kibana/issues/171601
-describe.skip('SuggestUsersPopover', () => {
+describe('SuggestUsersPopover', () => {
let appMockRender: AppMockRenderer;
let defaultProps: SuggestUsersPopoverProps;
diff --git a/x-pack/plugins/cases/public/components/category/category_form_field.test.tsx b/x-pack/plugins/cases/public/components/category/category_form_field.test.tsx
index d656bdf499eb..cdaae6f49c5c 100644
--- a/x-pack/plugins/cases/public/components/category/category_form_field.test.tsx
+++ b/x-pack/plugins/cases/public/components/category/category_form_field.test.tsx
@@ -16,17 +16,7 @@ import { categories } from '../../containers/mock';
import { MAX_CATEGORY_LENGTH } from '../../../common/constants';
import { FormTestComponent } from '../../common/test_utils';
-// FLAKY: https://github.com/elastic/kibana/issues/177791
-// FLAKY: https://github.com/elastic/kibana/issues/177792
-// FLAKY: https://github.com/elastic/kibana/issues/177793
-// FLAKY: https://github.com/elastic/kibana/issues/177794
-// FLAKY: https://github.com/elastic/kibana/issues/177795
-// FLAKY: https://github.com/elastic/kibana/issues/177796
-// FLAKY: https://github.com/elastic/kibana/issues/171605
-// FLAKY: https://github.com/elastic/kibana/issues/171606
-// FLAKY: https://github.com/elastic/kibana/issues/171607
-// FLAKY: https://github.com/elastic/kibana/issues/171608
-describe.skip('Category', () => {
+describe('Category', () => {
let appMockRender: AppMockRenderer;
const onSubmit = jest.fn();
diff --git a/x-pack/plugins/cases/public/components/configure_cases/__mock__/index.tsx b/x-pack/plugins/cases/public/components/configure_cases/__mock__/index.tsx
index c44e5fbc2231..e0161e437e70 100644
--- a/x-pack/plugins/cases/public/components/configure_cases/__mock__/index.tsx
+++ b/x-pack/plugins/cases/public/components/configure_cases/__mock__/index.tsx
@@ -5,6 +5,7 @@
* 2.0.
*/
+import { mockedTestProvidersOwner } from '../../../common/mock';
import type { ActionTypeConnector } from '../../../../common/types/domain';
import { ConnectorTypes } from '../../../../common/types/domain';
import type { ActionConnector } from '../../../containers/configure/types';
@@ -17,20 +18,30 @@ export const actionTypes: ActionTypeConnector[] = actionTypesMock;
export const searchURL =
'?timerange=(global:(linkTo:!(),timerange:(from:1585487656371,fromStr:now-24h,kind:relative,to:1585574056371,toStr:now)),timeline:(linkTo:!(),timerange:(from:1585227005527,kind:absolute,to:1585313405527)))';
-export const useCaseConfigureResponse = {
- data: {
- closureType: 'close-by-user',
- connector: {
- fields: null,
- id: 'none',
- name: 'none',
- type: ConnectorTypes.none,
- },
- customFields: [],
- mappings: [],
- version: '',
- id: '',
+const mockConfigurationData = {
+ closureType: 'close-by-user',
+ connector: {
+ fields: null,
+ id: 'none',
+ name: 'none',
+ type: ConnectorTypes.none,
},
+ customFields: [],
+ mappings: [],
+ version: '',
+ id: '',
+ owner: mockedTestProvidersOwner[0],
+};
+
+export const useCaseConfigureResponse = {
+ data: mockConfigurationData,
+ isLoading: false,
+ isFetching: false,
+ refetch: jest.fn(),
+};
+
+export const useGetAllCaseConfigurationsResponse = {
+ data: [mockConfigurationData],
isLoading: false,
isFetching: false,
refetch: jest.fn(),
diff --git a/x-pack/plugins/cases/public/components/connectors/resilient/use_get_incident_types.test.tsx b/x-pack/plugins/cases/public/components/connectors/resilient/use_get_incident_types.test.tsx
index 6430c1b1ff2f..4d7183d9985f 100644
--- a/x-pack/plugins/cases/public/components/connectors/resilient/use_get_incident_types.test.tsx
+++ b/x-pack/plugins/cases/public/components/connectors/resilient/use_get_incident_types.test.tsx
@@ -19,8 +19,7 @@ jest.mock('./api');
const useKibanaMock = useKibana as jest.Mocked;
-// FLAKY: https://github.com/elastic/kibana/issues/178119
-describe.skip('useGetIncidentTypes', () => {
+describe('useGetIncidentTypes', () => {
const { http } = useKibanaMock().services;
let appMockRender: AppMockRenderer;
diff --git a/x-pack/plugins/cases/public/components/create/custom_fields.test.tsx b/x-pack/plugins/cases/public/components/create/custom_fields.test.tsx
index 864ba68ff690..8ab517c497cd 100644
--- a/x-pack/plugins/cases/public/components/create/custom_fields.test.tsx
+++ b/x-pack/plugins/cases/public/components/create/custom_fields.test.tsx
@@ -15,6 +15,12 @@ import { FormTestComponent } from '../../common/test_utils';
import { customFieldsConfigurationMock } from '../../containers/mock';
import { CustomFields } from './custom_fields';
import * as i18n from './translations';
+import { useGetAllCaseConfigurations } from '../../containers/configure/use_get_all_case_configurations';
+import { useGetAllCaseConfigurationsResponse } from '../configure_cases/__mock__';
+
+jest.mock('../../containers/configure/use_get_all_case_configurations');
+
+const useGetAllCaseConfigurationsMock = useGetAllCaseConfigurations as jest.Mock;
describe('CustomFields', () => {
let appMockRender: AppMockRenderer;
@@ -23,12 +29,21 @@ describe('CustomFields', () => {
beforeEach(() => {
jest.clearAllMocks();
appMockRender = createAppMockRenderer();
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ customFields: customFieldsConfigurationMock,
+ },
+ ],
+ }));
});
it('renders correctly', async () => {
appMockRender.render(
-
+
);
@@ -43,9 +58,19 @@ describe('CustomFields', () => {
});
it('should not show the custom fields if the configuration is empty', async () => {
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ customFields: [],
+ },
+ ],
+ }));
+
appMockRender.render(
-
+
);
@@ -54,11 +79,21 @@ describe('CustomFields', () => {
});
it('should sort the custom fields correctly', async () => {
- const reversedConfiguration = [...customFieldsConfigurationMock].reverse();
+ const reversedCustomFieldsConfiguration = [...customFieldsConfigurationMock].reverse();
+
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ customFields: reversedCustomFieldsConfiguration,
+ },
+ ],
+ }));
appMockRender.render(
-
+
);
@@ -79,7 +114,7 @@ describe('CustomFields', () => {
appMockRender.render(
-
+
);
diff --git a/x-pack/plugins/cases/public/components/create/custom_fields.tsx b/x-pack/plugins/cases/public/components/create/custom_fields.tsx
index cfc80c125a7b..28cebde65db2 100644
--- a/x-pack/plugins/cases/public/components/create/custom_fields.tsx
+++ b/x-pack/plugins/cases/public/components/create/custom_fields.tsx
@@ -9,16 +9,34 @@ import React, { useMemo } from 'react';
import { sortBy } from 'lodash';
import { EuiFlexGroup, EuiFlexItem, EuiSpacer, EuiText } from '@elastic/eui';
+import { useFormData } from '@kbn/es-ui-shared-plugin/static/forms/hook_form_lib';
import type { CasesConfigurationUI } from '../../../common/ui';
import { builderMap as customFieldsBuilderMap } from '../custom_fields/builder';
import * as i18n from './translations';
+import { useCasesContext } from '../cases_context/use_cases_context';
+import { useGetAllCaseConfigurations } from '../../containers/configure/use_get_all_case_configurations';
+import { getConfigurationByOwner } from '../../containers/configure/utils';
interface Props {
isLoading: boolean;
- customFieldsConfiguration: CasesConfigurationUI['customFields'];
}
-const CustomFieldsComponent: React.FC = ({ isLoading, customFieldsConfiguration }) => {
+const CustomFieldsComponent: React.FC = ({ isLoading }) => {
+ const { owner } = useCasesContext();
+ const [{ selectedOwner }] = useFormData<{ selectedOwner: string }>({ watch: ['selectedOwner'] });
+ const { data: configurations, isLoading: isLoadingCaseConfiguration } =
+ useGetAllCaseConfigurations();
+
+ const configurationOwner: string | undefined = selectedOwner ? selectedOwner : owner[0];
+ const customFieldsConfiguration = useMemo(
+ () =>
+ getConfigurationByOwner({
+ configurations,
+ owner: configurationOwner,
+ }).customFields ?? [],
+ [configurations, configurationOwner]
+ );
+
const sortedCustomFields = useMemo(
() => sortCustomFieldsByLabel(customFieldsConfiguration),
[customFieldsConfiguration]
@@ -33,7 +51,7 @@ const CustomFieldsComponent: React.FC = ({ isLoading, customFieldsConfigu
return (
diff --git a/x-pack/plugins/cases/public/components/create/flyout/create_case_flyout.test.tsx b/x-pack/plugins/cases/public/components/create/flyout/create_case_flyout.test.tsx
index 90129b373cf7..ae41ae9ac264 100644
--- a/x-pack/plugins/cases/public/components/create/flyout/create_case_flyout.test.tsx
+++ b/x-pack/plugins/cases/public/components/create/flyout/create_case_flyout.test.tsx
@@ -39,11 +39,7 @@ const defaultProps = {
owner: 'securitySolution',
};
-// FLAKY: https://github.com/elastic/kibana/issues/174525
-// FLAKY: https://github.com/elastic/kibana/issues/174526
-// FLAKY: https://github.com/elastic/kibana/issues/174527
-// FLAKY: https://github.com/elastic/kibana/issues/174528
-describe.skip('CreateCaseFlyout', () => {
+describe('CreateCaseFlyout', () => {
let appMockRenderer: AppMockRenderer;
beforeEach(() => {
diff --git a/x-pack/plugins/cases/public/components/create/form.test.tsx b/x-pack/plugins/cases/public/components/create/form.test.tsx
index 05e778862480..65e5a378f53a 100644
--- a/x-pack/plugins/cases/public/components/create/form.test.tsx
+++ b/x-pack/plugins/cases/public/components/create/form.test.tsx
@@ -18,8 +18,8 @@ import type { FormProps } from './schema';
import { schema } from './schema';
import type { CreateCaseFormProps } from './form';
import { CreateCaseForm } from './form';
-import { useGetCaseConfiguration } from '../../containers/configure/use_get_case_configuration';
-import { useCaseConfigureResponse } from '../configure_cases/__mock__';
+import { useGetAllCaseConfigurations } from '../../containers/configure/use_get_all_case_configurations';
+import { useGetAllCaseConfigurationsResponse } from '../configure_cases/__mock__';
import { TestProviders } from '../../common/mock';
import { useGetSupportedActionConnectors } from '../../containers/configure/use_get_supported_action_connectors';
import { useGetTags } from '../../containers/use_get_tags';
@@ -27,13 +27,13 @@ import { useAvailableCasesOwners } from '../app/use_available_owners';
jest.mock('../../containers/use_get_tags');
jest.mock('../../containers/configure/use_get_supported_action_connectors');
-jest.mock('../../containers/configure/use_get_case_configuration');
+jest.mock('../../containers/configure/use_get_all_case_configurations');
jest.mock('../markdown_editor/plugins/lens/use_lens_draft_comment');
jest.mock('../app/use_available_owners');
const useGetTagsMock = useGetTags as jest.Mock;
const useGetConnectorsMock = useGetSupportedActionConnectors as jest.Mock;
-const useGetCaseConfigurationMock = useGetCaseConfiguration as jest.Mock;
+const useGetAllCaseConfigurationsMock = useGetAllCaseConfigurations as jest.Mock;
const useAvailableOwnersMock = useAvailableCasesOwners as jest.Mock;
const initialCaseValue: FormProps = {
@@ -81,7 +81,7 @@ describe('CreateCaseForm', () => {
useAvailableOwnersMock.mockReturnValue(['securitySolution', 'observability']);
useGetTagsMock.mockReturnValue({ data: ['test'] });
useGetConnectorsMock.mockReturnValue({ isLoading: false, data: connectorsMock });
- useGetCaseConfigurationMock.mockImplementation(() => useCaseConfigureResponse);
+ useGetAllCaseConfigurationsMock.mockImplementation(() => useGetAllCaseConfigurationsResponse);
});
afterEach(() => {
@@ -219,12 +219,14 @@ describe('CreateCaseForm', () => {
});
it('should render custom fields when available', () => {
- useGetCaseConfigurationMock.mockImplementation(() => ({
- ...useCaseConfigureResponse,
- data: {
- ...useCaseConfigureResponse.data,
- customFields: customFieldsConfigurationMock,
- },
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ customFields: customFieldsConfigurationMock,
+ },
+ ],
}));
const result = render(
diff --git a/x-pack/plugins/cases/public/components/create/form.tsx b/x-pack/plugins/cases/public/components/create/form.tsx
index fe98b7f0cf67..984bfb669eb5 100644
--- a/x-pack/plugins/cases/public/components/create/form.tsx
+++ b/x-pack/plugins/cases/public/components/create/form.tsx
@@ -19,7 +19,6 @@ import { useFormContext } from '@kbn/es-ui-shared-plugin/static/forms/hook_form_
import type { ActionConnector } from '../../../common/types/domain';
import type { CasePostRequest } from '../../../common/types/api';
-import type { CasesConfigurationUI } from '../../../common/ui';
import { Title } from './title';
import { Description, fieldName as descriptionFieldName } from './description';
import { Tags } from './tags';
@@ -66,11 +65,8 @@ const MySpinner = styled(EuiLoadingSpinner)`
export interface CreateCaseFormFieldsProps {
connectors: ActionConnector[];
- customFieldsConfiguration: CasesConfigurationUI['customFields'];
- isLoadingCaseConfiguration: boolean;
isLoadingConnectors: boolean;
withSteps: boolean;
- owner: string[];
draftStorageKey: string;
}
export interface CreateCaseFormProps extends Pick, 'withSteps'> {
@@ -87,15 +83,8 @@ export interface CreateCaseFormProps extends Pick = React.memo(
- ({
- connectors,
- isLoadingConnectors,
- withSteps,
- owner,
- draftStorageKey,
- customFieldsConfiguration,
- isLoadingCaseConfiguration,
- }) => {
+ ({ connectors, isLoadingConnectors, withSteps, draftStorageKey }) => {
+ const { owner } = useCasesContext();
const { isSubmitting } = useFormContext();
const { isSyncAlertsEnabled, caseAssignmentAuthorized } = useCasesFeatures();
const availableOwners = useAvailableCasesOwners();
@@ -133,10 +122,7 @@ export const CreateCaseFormFields: React.FC = React.m
-
+
>
@@ -148,8 +134,6 @@ export const CreateCaseFormFields: React.FC = React.m
canShowCaseSolutionSelection,
availableOwners,
draftStorageKey,
- customFieldsConfiguration,
- isLoadingCaseConfiguration,
]
);
@@ -251,11 +235,8 @@ export const CreateCaseForm: React.FC = React.memo(
>
diff --git a/x-pack/plugins/cases/public/components/create/form_context.test.tsx b/x-pack/plugins/cases/public/components/create/form_context.test.tsx
index 9b23b46b18e3..4c8991f0cb59 100644
--- a/x-pack/plugins/cases/public/components/create/form_context.test.tsx
+++ b/x-pack/plugins/cases/public/components/create/form_context.test.tsx
@@ -15,13 +15,19 @@ import type { AppMockRenderer } from '../../common/mock';
import { createAppMockRenderer } from '../../common/mock';
import { usePostCase } from '../../containers/use_post_case';
import { useCreateAttachments } from '../../containers/use_create_attachments';
+
import { useGetCaseConfiguration } from '../../containers/configure/use_get_case_configuration';
+import { useGetAllCaseConfigurations } from '../../containers/configure/use_get_all_case_configurations';
+
import { useGetIncidentTypes } from '../connectors/resilient/use_get_incident_types';
import { useGetSeverity } from '../connectors/resilient/use_get_severity';
import { useGetIssueTypes } from '../connectors/jira/use_get_issue_types';
import { useGetChoices } from '../connectors/servicenow/use_get_choices';
import { useGetFieldsByIssueType } from '../connectors/jira/use_get_fields_by_issue_type';
-import { useCaseConfigureResponse } from '../configure_cases/__mock__';
+import {
+ useCaseConfigureResponse,
+ useGetAllCaseConfigurationsResponse,
+} from '../configure_cases/__mock__';
import {
sampleConnectorData,
sampleData,
@@ -53,6 +59,7 @@ import {
ConnectorTypes,
CustomFieldTypes,
} from '../../../common/types/domain';
+import { useAvailableCasesOwners } from '../app/use_available_owners';
jest.mock('../../containers/use_post_case');
jest.mock('../../containers/use_create_attachments');
@@ -60,6 +67,7 @@ jest.mock('../../containers/use_post_push_to_service');
jest.mock('../../containers/use_get_tags');
jest.mock('../../containers/configure/use_get_supported_action_connectors');
jest.mock('../../containers/configure/use_get_case_configuration');
+jest.mock('../../containers/configure/use_get_all_case_configurations');
jest.mock('../connectors/resilient/use_get_incident_types');
jest.mock('../connectors/resilient/use_get_severity');
jest.mock('../connectors/jira/use_get_issue_types');
@@ -70,9 +78,11 @@ jest.mock('../../common/lib/kibana');
jest.mock('../../containers/user_profiles/api');
jest.mock('../../common/use_license');
jest.mock('../../containers/use_get_categories');
+jest.mock('../app/use_available_owners');
const useGetConnectorsMock = useGetSupportedActionConnectors as jest.Mock;
const useGetCaseConfigurationMock = useGetCaseConfiguration as jest.Mock;
+const useGetAllCaseConfigurationsMock = useGetAllCaseConfigurations as jest.Mock;
const usePostCaseMock = usePostCase as jest.Mock;
const useCreateAttachmentsMock = useCreateAttachments as jest.Mock;
const usePostPushToServiceMock = usePostPushToService as jest.Mock;
@@ -86,6 +96,7 @@ const pushCaseToExternalService = jest.fn();
const useKibanaMock = useKibana as jest.Mocked;
const useLicenseMock = useLicense as jest.Mock;
const useGetCategoriesMock = useGetCategories as jest.Mock;
+const useAvailableOwnersMock = useAvailableCasesOwners as jest.Mock;
const sampleId = 'case-id';
@@ -97,11 +108,8 @@ const defaultPostCase = {
const defaultCreateCaseForm: CreateCaseFormFieldsProps = {
isLoadingConnectors: false,
- isLoadingCaseConfiguration: false,
connectors: [],
- customFieldsConfiguration: [],
withSteps: true,
- owner: ['securitySolution'],
draftStorageKey: 'cases.kibana.createCase.description.markdownEditor',
};
@@ -149,8 +157,7 @@ const waitForFormToRender = async (renderer: Screen) => {
});
};
-// Failing: See https://github.com/elastic/kibana/issues/146394
-describe.skip('Create case', () => {
+describe('Create case', () => {
const refetch = jest.fn();
const onFormSubmitSuccess = jest.fn();
const afterCaseCreated = jest.fn();
@@ -199,12 +206,14 @@ describe.skip('Create case', () => {
usePostPushToServiceMock.mockImplementation(() => defaultPostPushToService);
useGetConnectorsMock.mockReturnValue(sampleConnectorData);
useGetCaseConfigurationMock.mockImplementation(() => useCaseConfigureResponse);
+ useGetAllCaseConfigurationsMock.mockImplementation(() => useGetAllCaseConfigurationsResponse);
useGetIncidentTypesMock.mockReturnValue(useGetIncidentTypesResponse);
useGetSeverityMock.mockReturnValue(useGetSeverityResponse);
useGetIssueTypesMock.mockReturnValue(useGetIssueTypesResponse);
useGetFieldsByIssueTypeMock.mockReturnValue(useGetFieldsByIssueTypeResponse);
useGetChoicesMock.mockReturnValue(useGetChoicesResponse);
useGetCategoriesMock.mockReturnValue({ isLoading: false, data: categories });
+ useAvailableOwnersMock.mockReturnValue(['securitySolution', 'observability', 'cases']);
(useGetTags as jest.Mock).mockImplementation(() => ({
data: sampleTags,
@@ -437,20 +446,22 @@ describe.skip('Create case', () => {
});
it('should submit form with custom fields', async () => {
- useGetCaseConfigurationMock.mockImplementation(() => ({
- ...useCaseConfigureResponse,
- data: {
- ...useCaseConfigureResponse.data,
- customFields: [
- ...customFieldsConfigurationMock,
- {
- key: 'my_custom_field_key',
- type: CustomFieldTypes.TEXT,
- label: 'my custom field label',
- required: false,
- },
- ],
- },
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ customFields: [
+ ...customFieldsConfigurationMock,
+ {
+ key: 'my_custom_field_key',
+ type: CustomFieldTypes.TEXT,
+ label: 'my custom field label',
+ required: false,
+ },
+ ],
+ },
+ ],
}));
appMockRender.render(
@@ -466,18 +477,20 @@ describe.skip('Create case', () => {
const textField = customFieldsConfigurationMock[0];
const toggleField = customFieldsConfigurationMock[1];
- expect(screen.getByTestId('create-case-custom-fields')).toBeInTheDocument();
+ expect(await screen.findByTestId('create-case-custom-fields')).toBeInTheDocument();
- userEvent.paste(
- screen.getByTestId(`${textField.key}-${textField.type}-create-custom-field`),
- 'My text test value 1'
+ const textCustomField = await screen.findByTestId(
+ `${textField.key}-${textField.type}-create-custom-field`
);
+ userEvent.clear(textCustomField);
+ userEvent.paste(textCustomField, 'My text test value 1');
+
userEvent.click(
- screen.getByTestId(`${toggleField.key}-${toggleField.type}-create-custom-field`)
+ await screen.findByTestId(`${toggleField.key}-${toggleField.type}-create-custom-field`)
);
- userEvent.click(screen.getByTestId('create-case-submit'));
+ userEvent.click(await screen.findByTestId('create-case-submit'));
await waitFor(() => expect(postCase).toHaveBeenCalled());
@@ -485,7 +498,10 @@ describe.skip('Create case', () => {
request: {
...sampleDataWithoutTags,
customFields: [
- ...customFieldsMock,
+ customFieldsMock[0],
+ { ...customFieldsMock[1], value: false }, // toggled the default
+ customFieldsMock[2],
+ { ...customFieldsMock[3], value: false },
{
key: 'my_custom_field_key',
type: CustomFieldTypes.TEXT,
@@ -496,6 +512,120 @@ describe.skip('Create case', () => {
});
});
+ it('should change custom fields based on the selected owner', async () => {
+ appMockRender = createAppMockRenderer({ owner: [] });
+
+ const securityCustomField = {
+ key: 'security_custom_field',
+ type: CustomFieldTypes.TEXT,
+ label: 'security custom field',
+ required: false,
+ };
+ const o11yCustomField = {
+ key: 'o11y_field_key',
+ type: CustomFieldTypes.TEXT,
+ label: 'observability custom field',
+ required: false,
+ };
+ const stackCustomField = {
+ key: 'stack_field_key',
+ type: CustomFieldTypes.TEXT,
+ label: 'stack custom field',
+ required: false,
+ };
+
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ owner: 'securitySolution',
+ customFields: [securityCustomField],
+ },
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ owner: 'observability',
+ customFields: [o11yCustomField],
+ },
+ {
+ ...useGetAllCaseConfigurationsResponse.data[0],
+ owner: 'cases',
+ customFields: [stackCustomField],
+ },
+ ],
+ }));
+
+ appMockRender.render(
+
+
+
+
+ );
+
+ await waitForFormToRender(screen);
+ await fillFormReactTestingLib({ renderer: screen });
+
+ const createCaseCustomFields = await screen.findByTestId('create-case-custom-fields');
+
+ // the default selectedOwner is securitySolution
+ // only the security custom field should be displayed
+ expect(
+ await within(createCaseCustomFields).findByTestId(
+ `${securityCustomField.key}-${securityCustomField.type}-create-custom-field`
+ )
+ ).toBeInTheDocument();
+ expect(
+ await within(createCaseCustomFields).queryByTestId(
+ `${o11yCustomField.key}-${o11yCustomField.type}-create-custom-field`
+ )
+ ).not.toBeInTheDocument();
+ expect(
+ await within(createCaseCustomFields).queryByTestId(
+ `${stackCustomField.key}-${stackCustomField.type}-create-custom-field`
+ )
+ ).not.toBeInTheDocument();
+
+ const caseOwnerSelector = await screen.findByTestId('caseOwnerSelector');
+
+ userEvent.click(await within(caseOwnerSelector).findByLabelText('Observability'));
+
+ // only the o11y custom field should be displayed
+ expect(
+ await within(createCaseCustomFields).findByTestId(
+ `${o11yCustomField.key}-${o11yCustomField.type}-create-custom-field`
+ )
+ ).toBeInTheDocument();
+ expect(
+ await within(createCaseCustomFields).queryByTestId(
+ `${securityCustomField.key}-${securityCustomField.type}-create-custom-field`
+ )
+ ).not.toBeInTheDocument();
+ expect(
+ await within(createCaseCustomFields).queryByTestId(
+ `${stackCustomField.key}-${stackCustomField.type}-create-custom-field`
+ )
+ ).not.toBeInTheDocument();
+
+ userEvent.click(await within(caseOwnerSelector).findByLabelText('Stack'));
+
+ // only the stack custom field should be displayed
+ expect(
+ await within(createCaseCustomFields).findByTestId(
+ `${stackCustomField.key}-${stackCustomField.type}-create-custom-field`
+ )
+ ).toBeInTheDocument();
+ expect(
+ await within(createCaseCustomFields).queryByTestId(
+ `${securityCustomField.key}-${securityCustomField.type}-create-custom-field`
+ )
+ ).not.toBeInTheDocument();
+ expect(
+ await within(createCaseCustomFields).queryByTestId(
+ `${o11yCustomField.key}-${o11yCustomField.type}-create-custom-field`
+ )
+ ).not.toBeInTheDocument();
+ });
+
it('should select the default connector set in the configuration', async () => {
useGetCaseConfigurationMock.mockImplementation(() => ({
...useCaseConfigureResponse,
@@ -510,6 +640,21 @@ describe.skip('Create case', () => {
},
}));
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data,
+ connector: {
+ id: 'servicenow-1',
+ name: 'SN',
+ type: ConnectorTypes.serviceNowITSM,
+ fields: null,
+ },
+ },
+ ],
+ }));
+
useGetConnectorsMock.mockReturnValue({
...sampleConnectorData,
data: connectorsMock,
@@ -562,6 +707,21 @@ describe.skip('Create case', () => {
},
}));
+ useGetAllCaseConfigurationsMock.mockImplementation(() => ({
+ ...useGetAllCaseConfigurationsResponse,
+ data: [
+ {
+ ...useGetAllCaseConfigurationsResponse.data,
+ connector: {
+ id: 'not-exist',
+ name: 'SN',
+ type: ConnectorTypes.serviceNowITSM,
+ fields: null,
+ },
+ },
+ ],
+ }));
+
useGetConnectorsMock.mockReturnValue({
...sampleConnectorData,
data: connectorsMock,
diff --git a/x-pack/plugins/cases/public/components/create/form_context.tsx b/x-pack/plugins/cases/public/components/create/form_context.tsx
index b48bcce96bec..04a327868418 100644
--- a/x-pack/plugins/cases/public/components/create/form_context.tsx
+++ b/x-pack/plugins/cases/public/components/create/form_context.tsx
@@ -15,7 +15,7 @@ import { getNoneConnector, normalizeActionConnector } from '../configure_cases/u
import { usePostCase } from '../../containers/use_post_case';
import { usePostPushToService } from '../../containers/use_post_push_to_service';
-import type { CaseUI, CaseUICustomField } from '../../containers/types';
+import type { CasesConfigurationUI, CaseUI, CaseUICustomField } from '../../containers/types';
import type { CasePostRequest } from '../../../common/types/api';
import type { UseCreateAttachments } from '../../containers/use_create_attachments';
import { useCreateAttachments } from '../../containers/use_create_attachments';
@@ -31,7 +31,7 @@ import { useAvailableCasesOwners } from '../app/use_available_owners';
import type { CaseAttachmentsWithoutOwner } from '../../types';
import { useGetSupportedActionConnectors } from '../../containers/configure/use_get_supported_action_connectors';
import { useCreateCaseWithAttachmentsTransaction } from '../../common/apm/use_cases_transactions';
-import { useGetCaseConfiguration } from '../../containers/configure/use_get_case_configuration';
+import { useGetAllCaseConfigurations } from '../../containers/configure/use_get_all_case_configurations';
import { useApplication } from '../../common/lib/kibana/use_application';
const initialCaseValue: FormProps = {
@@ -66,10 +66,7 @@ export const FormContext: React.FC = ({
}) => {
const { data: connectors = [], isLoading: isLoadingConnectors } =
useGetSupportedActionConnectors();
- const {
- data: { customFields: customFieldsConfiguration },
- isLoading: isLoadingCaseConfiguration,
- } = useGetCaseConfiguration();
+ const { data: allConfigurations } = useGetAllCaseConfigurations();
const { owner } = useCasesContext();
const { appId } = useApplication();
const { isSyncAlertsEnabled } = useCasesFeatures();
@@ -98,15 +95,20 @@ export const FormContext: React.FC = ({
};
const transformCustomFieldsData = useCallback(
- (customFields: Record) => {
+ (
+ customFields: Record,
+ selectedCustomFieldsConfiguration: CasesConfigurationUI['customFields']
+ ) => {
const transformedCustomFields: CaseUI['customFields'] = [];
- if (!customFields || !customFieldsConfiguration.length) {
+ if (!customFields || !selectedCustomFieldsConfiguration.length) {
return [];
}
for (const [key, value] of Object.entries(customFields)) {
- const configCustomField = customFieldsConfiguration.find((item) => item.key === key);
+ const configCustomField = selectedCustomFieldsConfiguration.find(
+ (item) => item.key === key
+ );
if (configCustomField) {
transformedCustomFields.push({
key: configCustomField.key,
@@ -118,7 +120,7 @@ export const FormContext: React.FC = ({
return transformedCustomFields;
},
- [customFieldsConfiguration]
+ []
);
const submitCase = useCallback(
@@ -142,7 +144,19 @@ export const FormContext: React.FC = ({
? normalizeActionConnector(caseConnector, fields)
: getNoneConnector();
- const transformedCustomFields = transformCustomFieldsData(customFields);
+ const configurationOwner: string | undefined = selectedOwner ? selectedOwner : owner[0];
+ const selectedConfiguration = allConfigurations.find(
+ (element: CasesConfigurationUI) => element.owner === configurationOwner
+ );
+
+ const customFieldsConfiguration = selectedConfiguration
+ ? selectedConfiguration.customFields
+ : [];
+
+ const transformedCustomFields = transformCustomFieldsData(
+ customFields,
+ customFieldsConfiguration ?? []
+ );
const trimmedData = trimUserFormData(userFormData);
@@ -184,17 +198,18 @@ export const FormContext: React.FC = ({
[
isSyncAlertsEnabled,
connectors,
+ owner,
+ availableOwners,
startTransaction,
appId,
attachments,
+ transformCustomFieldsData,
+ allConfigurations,
postCase,
- owner,
- availableOwners,
afterCaseCreated,
onSuccess,
createAttachments,
pushCaseToExternalService,
- transformCustomFieldsData,
]
);
@@ -214,18 +229,10 @@ export const FormContext: React.FC = ({
React.cloneElement(child, {
connectors,
isLoadingConnectors,
- customFieldsConfiguration,
- isLoadingCaseConfiguration,
})
)
: null,
- [
- children,
- connectors,
- isLoadingConnectors,
- customFieldsConfiguration,
- isLoadingCaseConfiguration,
- ]
+ [children, connectors, isLoadingConnectors]
);
return (