[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

kibanamachine · 2021-09-02T18:29:48Z

Backports the following commits to 7.x:

[Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. ([Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. #109253)

…or Match rules to ignore custom rule filters if a saved query was used in the rule definition. (elastic#109253) * Ignore saved_id for Threat match and threshold rules Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>

rylnd · 2021-09-03T20:13:53Z

@elasticmachine merge upstream

rylnd · 2021-09-07T21:34:19Z

@elasticmachine merge upstream

kibanamachine · 2021-09-08T00:57:33Z

💛 Build succeeded, but was flaky

continuous-integration/kibana-ci/pull-request
Commit: fb1f214
Storybooks Preview
Documentation Changes
Flaky suites:
- xpack-kibana-ciGroup4

Test Failures

Kibana Pipeline / general / Chrome X-Pack UI Functional Tests.x-pack/test/functional/apps/lens/drag_and_drop·ts.lens app lens drag and drop tests basic drag and drop should construct the basic split xy chart

Link to Jenkins

Standard Out

Failed Tests Reporter:
  - Test has failed 7 times on tracked branches: https://github.com/elastic/kibana/issues/108352

[00:00:00]       │
[00:11:13]         └-: lens app
[00:11:13]           └-> "before all" hook in "lens app"
[00:11:13]           └-> "before all" hook in "lens app"
[00:11:13]             │ debg Starting lens before method
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Loading "mappings.json"
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Loading "data.json.gz"
[00:11:13]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [logstash-2015.09.22/3VNFIzNlRLaRaRIBrcreuw] deleting index
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Deleted existing index "logstash-2015.09.22"
[00:11:13]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [logstash-2015.09.22] creating index, cause [api], templates [], shards [1]/[0]
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Created index "logstash-2015.09.22"
[00:11:13]             │ debg [x-pack/test/functional/es_archives/logstash_functional] "logstash-2015.09.22" settings {"index":{"analysis":{"analyzer":{"url":{"max_token_length":"1000","tokenizer":"uax_url_email","type":"standard"}}},"number_of_replicas":"0","number_of_shards":"1"}}
[00:11:13]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [logstash-2015.09.20/NWXZX4IoRVKMuqEJ9uF57A] deleting index
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Deleted existing index "logstash-2015.09.20"
[00:11:13]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [logstash-2015.09.20] creating index, cause [api], templates [], shards [1]/[0]
[00:11:14]             │ info [x-pack/test/functional/es_archives/logstash_functional] Created index "logstash-2015.09.20"
[00:11:14]             │ debg [x-pack/test/functional/es_archives/logstash_functional] "logstash-2015.09.20" settings {"index":{"analysis":{"analyzer":{"url":{"max_token_length":"1000","tokenizer":"uax_url_email","type":"standard"}}},"number_of_replicas":"0","number_of_shards":"1"}}
[00:11:14]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [logstash-2015.09.21/q03gWKNhSv625lTxwZQKmg] deleting index
[00:11:14]             │ info [x-pack/test/functional/es_archives/logstash_functional] Deleted existing index "logstash-2015.09.21"
[00:11:14]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [logstash-2015.09.21] creating index, cause [api], templates [], shards [1]/[0]
[00:11:14]             │ info [x-pack/test/functional/es_archives/logstash_functional] Created index "logstash-2015.09.21"
[00:11:14]             │ debg [x-pack/test/functional/es_archives/logstash_functional] "logstash-2015.09.21" settings {"index":{"analysis":{"analyzer":{"url":{"max_token_length":"1000","tokenizer":"uax_url_email","type":"standard"}}},"number_of_replicas":"0","number_of_shards":"1"}}
[00:11:14]             │ info [o.e.c.m.MetadataMappingService] [node-01] [logstash-2015.09.21/MhgLGiGwSeW5tJxNHNi4Vg] update_mapping [_doc]
[00:11:18]             │ info [o.e.c.m.MetadataMappingService] [node-01] [logstash-2015.09.20/5t-i_aErSsS2WbUPqgGJEw] update_mapping [_doc]
[00:11:23]             │ info progress: 10230
[00:11:26]             │ info [x-pack/test/functional/es_archives/logstash_functional] Indexed 4634 docs into "logstash-2015.09.22"
[00:11:26]             │ info [x-pack/test/functional/es_archives/logstash_functional] Indexed 4757 docs into "logstash-2015.09.20"
[00:11:26]             │ info [x-pack/test/functional/es_archives/logstash_functional] Indexed 4614 docs into "logstash-2015.09.21"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Loading "mappings.json"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Loading "data.json"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Loading "data.json.gz"
[00:11:27]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_1/BERA1Na2QbWJ2Q8KbGlDhw] deleting index
[00:11:27]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_task_manager_7.16.0_001/PG-EzmIOR6y3RNLngeTKyA] deleting index
[00:11:27]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_7.16.0_001/6_1VTU4ATW27sm_FlKOmlg] deleting index
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Deleted existing index ".kibana_task_manager_7.16.0_001"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Deleted existing index ".kibana_7.16.0_001"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Deleted existing index ".kibana_1"
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_1] creating index, cause [api], templates [], shards [1]/[0]
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Created index ".kibana_1"
[00:11:27]             │ debg [x-pack/test/functional/es_archives/lens/basic] ".kibana_1" settings {"index":{"auto_expand_replicas":"0-1","number_of_replicas":"0","number_of_shards":"1"}}
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Indexed 24 docs into ".kibana_1"
[00:11:27]             │ debg Migrating saved objects
[00:11:27]             │ proc [kibana]   log   [22:16:45.730] [info][savedobjects-service] [.kibana_task_manager] INIT -> CREATE_NEW_TARGET. took: 3ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.733] [info][savedobjects-service] [.kibana] INIT -> WAIT_FOR_YELLOW_SOURCE. took: 9ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.736] [info][savedobjects-service] [.kibana] WAIT_FOR_YELLOW_SOURCE -> CHECK_UNKNOWN_DOCUMENTS. took: 3ms.
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_task_manager_7.16.0_001] creating index, cause [api], templates [], shards [1]/[1]
[00:11:27]             │ info [o.e.c.r.a.AllocationService] [node-01] updating number_of_replicas to [0] for indices [.kibana_task_manager_7.16.0_001]
[00:11:27]             │ proc [kibana]   log   [22:16:45.743] [info][savedobjects-service] [.kibana] CHECK_UNKNOWN_DOCUMENTS -> SET_SOURCE_WRITE_BLOCK. took: 7ms.
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] adding block write to indices [[.kibana_1/fJtHqf-eSoyWTOqQ2dP69w]]
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] completed adding block write to indices [.kibana_1]
[00:11:27]             │ proc [kibana]   log   [22:16:45.807] [info][savedobjects-service] [.kibana_task_manager] CREATE_NEW_TARGET -> MARK_VERSION_INDEX_READY. took: 77ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.823] [info][savedobjects-service] [.kibana] SET_SOURCE_WRITE_BLOCK -> CALCULATE_EXCLUDE_FILTERS. took: 80ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.829] [info][savedobjects-service] [.kibana] CALCULATE_EXCLUDE_FILTERS -> CREATE_REINDEX_TEMP. took: 6ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.845] [info][savedobjects-service] [.kibana_task_manager] MARK_VERSION_INDEX_READY -> DONE. took: 38ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.846] [info][savedobjects-service] [.kibana_task_manager] Migration completed after 119ms
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_7.16.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1]
[00:11:27]             │ info [o.e.c.r.a.AllocationService] [node-01] updating number_of_replicas to [0] for indices [.kibana_7.16.0_reindex_temp]
[00:11:27]             │ proc [kibana]   log   [22:16:45.906] [info][savedobjects-service] [.kibana] CREATE_REINDEX_TEMP -> REINDEX_SOURCE_TO_TEMP_OPEN_PIT. took: 77ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.910] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_OPEN_PIT -> REINDEX_SOURCE_TO_TEMP_READ. took: 4ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.919] [info][savedobjects-service] [.kibana] Starting to process 12 documents.
[00:11:27]             │ proc [kibana]   log   [22:16:45.919] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_READ -> REINDEX_SOURCE_TO_TEMP_INDEX. took: 9ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.956] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_INDEX -> REINDEX_SOURCE_TO_TEMP_INDEX_BULK. took: 37ms.
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ proc [kibana]   log   [22:16:46.109] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_INDEX_BULK -> REINDEX_SOURCE_TO_TEMP_READ. took: 153ms.
[00:11:27]             │ proc [kibana]   log   [22:16:46.117] [info][savedobjects-service] [.kibana] Processed 12 documents out of 12.
[00:11:27]             │ proc [kibana]   log   [22:16:46.117] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_READ -> REINDEX_SOURCE_TO_TEMP_CLOSE_PIT. took: 7ms.
[00:11:27]             │ proc [kibana]   log   [22:16:46.121] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_CLOSE_PIT -> SET_TEMP_WRITE_BLOCK. took: 5ms.
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] adding block write to indices [[.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q]]
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] completed adding block write to indices [.kibana_7.16.0_reindex_temp]
[00:11:27]             │ proc [kibana]   log   [22:16:46.168] [info][savedobjects-service] [.kibana] SET_TEMP_WRITE_BLOCK -> CLONE_TEMP_TO_TARGET. took: 47ms.
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] applying create index request using existing index [.kibana_7.16.0_reindex_temp] metadata
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_7.16.0_001] creating index, cause [clone_index], templates [], shards [1]/[1]
[00:11:27]             │ info [o.e.c.r.a.AllocationService] [node-01] updating number_of_replicas to [0] for indices [.kibana_7.16.0_001]
[00:11:28]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_001/uGXdL1RxTSelsXPYLjgPog] create_mapping [_doc]
[00:11:28]             │ proc [kibana]   log   [22:16:46.297] [info][savedobjects-service] [.kibana] CLONE_TEMP_TO_TARGET -> REFRESH_TARGET. took: 129ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.301] [info][savedobjects-service] [.kibana] REFRESH_TARGET -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 4ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.304] [info][savedobjects-service] [.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 3ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.311] [info][savedobjects-service] [.kibana] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 7ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.314] [info][savedobjects-service] [.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 3ms.
[00:11:28]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_001/uGXdL1RxTSelsXPYLjgPog] update_mapping [_doc]
[00:11:28]             │ proc [kibana]   log   [22:16:46.380] [info][savedobjects-service] [.kibana] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 66ms.
[00:11:28]             │ info [o.e.t.LoggingTaskListener] [node-01] 21329 finished with response BulkByScrollResponse[took=38.5ms,timed_out=false,sliceId=null,updated=12,created=0,deleted=0,batches=1,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]]
[00:11:28]             │ proc [kibana]   log   [22:16:46.485] [info][savedobjects-service] [.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> MARK_VERSION_INDEX_READY. took: 105ms.
[00:11:28]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] deleting index
[00:11:28]             │ proc [kibana]   log   [22:16:46.528] [info][savedobjects-service] [.kibana] MARK_VERSION_INDEX_READY -> DONE. took: 43ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.528] [info][savedobjects-service] [.kibana] Migration completed after 804ms
[00:11:28]             │ debg [x-pack/test/functional/es_archives/lens/basic] Migrated Kibana index after loading Kibana data
[00:11:28]             │ debg [x-pack/test/functional/es_archives/lens/basic] Ensured that default space exists in .kibana
[00:11:28]             │ debg applying update to kibana config: {"accessibility:disableAnimations":true,"dateFormat:tz":"UTC","visualization:visualize:legacyChartsLibrary":true,"visualization:visualize:legacyPieChartsLibrary":true}
[00:11:30]           └-: 
[00:11:30]             └-> "before all" hook in ""
[01:05:50]             └-: lens drag and drop tests
[01:05:50]               └-> "before all" hook in "lens drag and drop tests"
[01:05:50]               └-: basic drag and drop
[01:05:50]                 └-> "before all" hook for "should construct the basic split xy chart"
[01:05:50]                 └-> should construct the basic split xy chart
[01:05:50]                   └-> "before each" hook: global before each for "should construct the basic split xy chart"
[01:05:50]                   │ debg navigating to visualize url: http://localhost:61221/app/visualize#/
[01:05:50]                   │ debg navigate to: http://localhost:61221/app/visualize#/
[01:05:50]                   │ debg ... sleep(700) start
[01:05:50]                   │ debg browser[INFO] http://localhost:61221/app/visualize?_t=1631056268808#/ 281 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[01:05:50]                   │
[01:05:50]                   │ debg browser[INFO] http://localhost:61221/bootstrap.js 41:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[01:05:51]                   │ debg ... sleep(700) end
[01:05:51]                   │ debg returned from get, calling refresh
[01:05:53]                   │ debg browser[INFO] http://localhost:61221/app/visualize?_t=1631056268808#/ 281 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[01:05:53]                   │
[01:05:53]                   │ debg browser[INFO] http://localhost:61221/bootstrap.js 41:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[01:05:53]                   │ debg currentUrl = http://localhost:61221/app/visualize#/
[01:05:53]                   │          appUrl = http://localhost:61221/app/visualize#/
[01:05:53]                   │ debg TestSubjects.find(kibanaChrome)
[01:05:53]                   │ debg Find.findByCssSelector('[data-test-subj="kibanaChrome"]') with timeout=60000
[01:05:53]                   │ debg ... sleep(501) start
[01:05:54]                   │ debg ... sleep(501) end
[01:05:54]                   │ debg in navigateTo url = http://localhost:61221/app/visualize#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))
[01:05:54]                   │ debg --- retry.tryForTime error: URL changed, waiting for it to settle
[01:05:54]                   │ debg ... sleep(501) start
[01:05:55]                   │ debg ... sleep(501) end
[01:05:55]                   │ debg in navigateTo url = http://localhost:61221/app/visualize#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))
[01:05:55]                   │ debg isGlobalLoadingIndicatorVisible
[01:05:55]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:05:55]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:05:56]                   │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[01:05:57]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:05:57]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:05:57]                   │ debg TestSubjects.exists(newItemButton)
[01:05:57]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="newItemButton"]') with timeout=10000
[01:05:57]                   │ debg TestSubjects.click(newItemButton)
[01:05:57]                   │ debg Find.clickByCssSelector('[data-test-subj="newItemButton"]') with timeout=10000
[01:05:57]                   │ debg Find.findByCssSelector('[data-test-subj="newItemButton"]') with timeout=10000
[01:05:57]                   │ debg TestSubjects.find(visNewDialogGroups)
[01:05:57]                   │ debg Find.findByCssSelector('[data-test-subj="visNewDialogGroups"]') with timeout=10000
[01:05:57]                   │ debg TestSubjects.click(visType-lens)
[01:05:57]                   │ debg Find.clickByCssSelector('[data-test-subj="visType-lens"]') with timeout=10000
[01:05:57]                   │ debg Find.findByCssSelector('[data-test-subj="visType-lens"]') with timeout=10000
[01:05:57]                   │ debg isGlobalLoadingIndicatorVisible
[01:05:57]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:05:57]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:05:59]                   │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[01:05:59]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:05:59]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:05:59]                   │ debg lensPage.goToTimeRange()
[01:05:59]                   │ debg TestSubjects.exists(noDataPopoverDismissButton)
[01:05:59]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="noDataPopoverDismissButton"]') with timeout=2500
[01:05:59]                   │ debg TestSubjects.click(noDataPopoverDismissButton)
[01:05:59]                   │ debg Find.clickByCssSelector('[data-test-subj="noDataPopoverDismissButton"]') with timeout=10000
[01:05:59]                   │ debg Find.findByCssSelector('[data-test-subj="noDataPopoverDismissButton"]') with timeout=10000
[01:05:59]                   │ debg Setting absolute range to Sep 19, 2015 @ 06:31:44.000 to Sep 23, 2015 @ 18:31:44.000
[01:05:59]                   │ debg TestSubjects.exists(superDatePickerToggleQuickMenuButton)
[01:05:59]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerToggleQuickMenuButton"]') with timeout=20000
[01:06:00]                   │ debg TestSubjects.exists(superDatePickerShowDatesButton)
[01:06:00]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerShowDatesButton"]') with timeout=2500
[01:06:00]                   │ debg TestSubjects.click(superDatePickerShowDatesButton)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerShowDatesButton"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerShowDatesButton"]') with timeout=10000
[01:06:00]                   │ debg TestSubjects.exists(superDatePickerstartDatePopoverButton)
[01:06:00]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerstartDatePopoverButton"]') with timeout=2500
[01:06:00]                   │ debg TestSubjects.click(superDatePickerendDatePopoverButton)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerendDatePopoverButton"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerendDatePopoverButton"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('div.euiPopover__panel-isOpen') with timeout=10000
[01:06:00]                   │ debg TestSubjects.click(superDatePickerAbsoluteTab)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:00]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:00]                   │ debg TestSubjects.setValue(superDatePickerAbsoluteDateInput, Sep 23, 2015 @ 18:31:44.000)
[01:06:00]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg TestSubjects.click(superDatePickerstartDatePopoverButton)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerstartDatePopoverButton"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerstartDatePopoverButton"]') with timeout=10000
[01:06:01]                   │ debg Find.waitForElementStale with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('div.euiPopover__panel-isOpen') with timeout=10000
[01:06:01]                   │ debg TestSubjects.click(superDatePickerAbsoluteTab)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:01]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg TestSubjects.setValue(superDatePickerAbsoluteDateInput, Sep 19, 2015 @ 06:31:44.000)
[01:06:01]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:02]                   │ debg Waiting up to 20000ms for Timepicker popover to close...
[01:06:02]                   │ debg TestSubjects.exists(superDatePickerAbsoluteDateInput)
[01:06:02]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=2500
[01:06:02]                   │ debg --- retry.tryForTime error: [data-test-subj="superDatePickerAbsoluteDateInput"] is not displayed
[01:06:05]                   │ debg --- retry.tryForTime failed again with the same message...
[01:06:05]                   │ debg TestSubjects.exists(superDatePickerApplyTimeButton)
[01:06:05]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerApplyTimeButton"]') with timeout=2500
[01:06:08]                   │ debg --- retry.tryForTime error: [data-test-subj="superDatePickerApplyTimeButton"] is not displayed
[01:06:08]                   │ debg TestSubjects.click(querySubmitButton)
[01:06:08]                   │ debg Find.clickByCssSelector('[data-test-subj="querySubmitButton"]') with timeout=10000
[01:06:08]                   │ debg Find.findByCssSelector('[data-test-subj="querySubmitButton"]') with timeout=10000
[01:06:09]                   │ debg Find.waitForElementStale with timeout=10000
[01:06:09]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:06:09]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:06:09]                   │ debg isGlobalLoadingIndicatorVisible
[01:06:09]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:06:09]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:06:09]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:06:09]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:06:09]                   │ debg lensPage.dragFieldToWorkspace('@timestamp')
[01:06:09]                   │ debg Find.existsByCssSelector('lnsFieldListPanelField-@timestamp') with timeout=2500
[01:06:10]                   │ debg lensPage.waitForLensDragDropToFinish()
[01:06:10]                   │ debg Find.existsByCssSelector('.lnsDragDrop-isActiveGroup') with timeout=2500
[01:06:12]                   │ debg isGlobalLoadingIndicatorVisible
[01:06:12]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:06:12]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:06:14]                   │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[01:06:14]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:06:14]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:06:14]                   │ debg lensPage.getDimensionTriggerText('lnsXY_xDimensionPanel')
[01:06:14]                   │ debg lensPage.getDimensionTriggersTexts('lnsXY_xDimensionPanel')
[01:06:14]                   │ debg TestSubjects.findAll(lnsXY_xDimensionPanel > lns-dimensionTrigger)
[01:06:14]                   │ debg Find.allByCssSelector('[data-test-subj="lnsXY_xDimensionPanel"] [data-test-subj="lns-dimensionTrigger"]') with timeout=10000
[01:06:24]                   │ info Taking screenshot "/dev/shm/workspace/parallel/22/kibana/x-pack/test/functional/screenshots/failure/lens app  lens drag and drop tests basic drag and drop should construct the basic split xy chart.png"
[01:06:25]                   │ info Current URL is: http://localhost:61221/app/lens#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:%272015-09-19T06:31:44.000Z%27,to:%272015-09-23T18:31:44.000Z%27))
[01:06:25]                   │ info Saving page source to: /dev/shm/workspace/parallel/22/kibana/x-pack/test/functional/failure_debug/html/lens app  lens drag and drop tests basic drag and drop should construct the basic split xy chart.html
[01:06:25]                   └- ✖ fail: lens app  lens drag and drop tests basic drag and drop should construct the basic split xy chart
[01:06:25]                   │      Error: expected undefined to sort of equal '@timestamp'
[01:06:25]                   │       at Assertion.assert (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:100:11)
[01:06:25]                   │       at Assertion.eql (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:244:8)
[01:06:25]                   │       at Context.<anonymous> (test/functional/apps/lens/drag_and_drop.ts:23:92)
[01:06:25]                   │       at runMicrotasks (<anonymous>)
[01:06:25]                   │       at processTicksAndRejections (internal/process/task_queues.js:95:5)
[01:06:25]                   │       at Object.apply (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/test/target_node/functional_test_runner/lib/mocha/wrap_function.js:87:16)
[01:06:25]                   │ 
[01:06:25]                   │

Stack Trace

Error: expected undefined to sort of equal '@timestamp'
    at Assertion.assert (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:100:11)
    at Assertion.eql (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:244:8)
    at Context.<anonymous> (test/functional/apps/lens/drag_and_drop.ts:23:92)
    at runMicrotasks (<anonymous>)
    at processTicksAndRejections (internal/process/task_queues.js:95:5)
    at Object.apply (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/test/target_node/functional_test_runner/lib/mocha/wrap_function.js:87:16) {
  actual: undefined,
  expected: '@timestamp',
  showDiff: true
}

Metrics [docs]

✅ unchanged

History

💔 Build #151079 failed b5260d1

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @nkhristinin

kibanamachine assigned nkhristinin Sep 2, 2021

kibanamachine added the backport label Sep 2, 2021

kibanamachine enabled auto-merge (squash) September 2, 2021 18:29

kibanamachine mentioned this pull request Sep 2, 2021

[Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. #109253

Merged

2 tasks

Merge branch '7.x' into backport/7.x/pr-109253

b5260d1

Merge branch '7.x' into backport/7.x/pr-109253

fb1f214

kibanamachine merged commit cac2c82 into elastic:7.x Sep 8, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

kibanamachine commented Sep 2, 2021

rylnd commented Sep 3, 2021

rylnd commented Sep 7, 2021

kibanamachine commented Sep 8, 2021

Standard Out

Stack Trace

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

Conversation

kibanamachine commented Sep 2, 2021

rylnd commented Sep 3, 2021

rylnd commented Sep 7, 2021

kibanamachine commented Sep 8, 2021

💛 Build succeeded, but was flaky

Test Failures

Standard Out

Stack Trace

Metrics [docs]

History