From abae1f1aaee27f1620563a1b260348cda9b44bca Mon Sep 17 00:00:00 2001 From: PhilippeOberti Date: Thu, 10 Oct 2024 15:53:05 -0500 Subject: [PATCH 1/2] [SecuritySolution][Threat Intelligence] - re-enable Cypress test skipped because of removal of bsearch --- .../e2e/investigations/threat_intelligence/indicators.cy.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts index f485ead495949..980b745c8ae97 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts @@ -67,8 +67,7 @@ const URL = '/app/security/threat_intelligence/indicators'; const URL_WITH_CONTRADICTORY_FILTERS = '/app/security/threat_intelligence/indicators?indicators=(filterQuery:(language:kuery,query:%27%27),filters:!((%27$state%27:(store:appState),meta:(alias:!n,disabled:!f,index:%27%27,key:threat.indicator.type,negate:!f,params:(query:file),type:phrase),query:(match_phrase:(threat.indicator.type:file))),(%27$state%27:(store:appState),meta:(alias:!n,disabled:!f,index:%27%27,key:threat.indicator.type,negate:!f,params:(query:url),type:phrase),query:(match_phrase:(threat.indicator.type:url)))),timeRange:(from:now/d,to:now/d))'; -// Failing: See https://github.com/elastic/kibana/issues/195804 -describe.skip('Single indicator', { tags: ['@ess'] }, () => { +describe('Single indicator', { tags: ['@ess'] }, () => { before(() => cy.task('esArchiverLoad', { archiveName: 'ti_indicators_data_single' })); after(() => cy.task('esArchiverUnload', { archiveName: 'ti_indicators_data_single' })); @@ -270,6 +269,7 @@ describe('Multiple indicators', { tags: ['@ess'] }, () => { }); it('should handle all search actions', () => { + // TODO fix cy.log('should narrow the results to url indicators when respective KQL search is executed'); enterQuery('threat.indicator.type: "url"{enter}'); @@ -299,7 +299,7 @@ describe('Multiple indicators', { tags: ['@ess'] }, () => { cy.log('should reload the data when refresh button is pressed'); - cy.intercept(/bsearch/).as('search'); + cy.intercept('POST', '/internal/search/threatIntelligenceSearchStrategy').as('search'); cy.get(REFRESH_BUTTON).should('exist').click(); cy.wait('@search'); }); From 7980e650715fd4128ff5b89e612bd7b08828940a Mon Sep 17 00:00:00 2001 From: PhilippeOberti Date: Thu, 10 Oct 2024 19:03:49 -0500 Subject: [PATCH 2/2] remove unwanted TODO --- .../e2e/investigations/threat_intelligence/indicators.cy.ts | 1 - 1 file changed, 1 deletion(-) diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts index 980b745c8ae97..b0e5764469459 100644 --- a/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts +++ b/x-pack/test/security_solution_cypress/cypress/e2e/investigations/threat_intelligence/indicators.cy.ts @@ -269,7 +269,6 @@ describe('Multiple indicators', { tags: ['@ess'] }, () => { }); it('should handle all search actions', () => { - // TODO fix cy.log('should narrow the results to url indicators when respective KQL search is executed'); enterQuery('threat.indicator.type: "url"{enter}');