Adds event log for actions and alerting #45081
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
21 tasks
pmuellr
force-pushed
the
actions/event-log
branch
3 times, most recently
from
d33fc17 to
e19f2e7
Compare
pmuellr
force-pushed
the
actions/event-log
branch
4 times, most recently
from
9b01b04 to
b93d6ab
Compare
pmuellr
force-pushed
the
actions/event-log
branch
2 times, most recently
from
759e3a8 to
001eca9
Compare
pmuellr
force-pushed
the
actions/event-log
branch
2 times, most recently
from
de05b5d to
e442f63
Compare
pmuellr
force-pushed
the
actions/event-log
branch
from
862e286 to
c31bf7c
Compare
pmuellr
force-pushed
the
actions/event-log
branch
from
48a493a to
9595714
Compare
pmuellr
force-pushed
the
actions/event-log
branch
from
cb8b615 to
0753e46
Compare
pmuellr
force-pushed
the
actions/event-log
branch
from
9abc912 to
dad3ec7
Compare
|
For anyone that pulled the branch down from my repo: I just force-pushed to get up to latest master - didn't want to, but a merge master left me w/8500 changes (wha?), tried twice, same thing. I was actually going to push that merge, but the commit script (ts linting) was taking forever, decided to live with a rebase. |
|
@elasticmachine merge upstream |
|
@elasticmachine merge upstream |
gmmorris
approved these changes
Jan 21, 2020
|
@elasticmachine merge upstream |
|
Gonna do one more merge from master (just started) since it's a day old, will merge upon success! |
|
@elasticmachine merge upstream |
💚 Build SucceededHistory
To update your PR or re-run it, just comment with: |
pmuellr
added a commit
to pmuellr/kibana
that referenced
this pull request
Jan 21, 2020
initial code for event log see issue elastic#45083
pmuellr
added a commit
that referenced
this pull request
Jan 22, 2020
gmmorris
added a commit
to gmmorris/kibana
that referenced
this pull request
Jan 22, 2020
* master: (38 commits) [ML] Fix counters and percentages for array fields on the Data visualizer page (elastic#55209) [SIEM][Detection Engine] Tags being turned into null rules part deux (elastic#55507) [DOCS] Add tip for using elasticsearch-certutil http command (elastic#55357) [SIEM][Detection Engine] Critical blocker, fixes schema accepting values it should not (elastic#55488) [SIEM] Detections create prepackage rules (elastic#55403) [Reporting] Convert CSV Export libs to Typescript (elastic#55117) [Maps] show field type icons in data driven styling field select (elastic#55166) Adds event log for actions and alerting (elastic#45081) [SIEM][Detection Engine] Fixes critical blocker where signals on signals are not operating [SIEM][Detection Engine] Critical blocker, adds need REST prefix for cloud remove incorrect config (elastic#55427) Retain pinned filters when loading and clearing saved queries (elastic#54307) Resolver zoom, pan, and center controls (elastic#55221) Skip failing endpoint saga tests [skip-ci] Update migration guide to add rendering service example (elastic#54744) [DOCS] Updates to heat map page (elastic#55097) [Endpoint] Fix saga to start only after store is created and stopped on app unmount (elastic#55245) [Logs UI] Use the correct icons and labels in the feature cont… (elastic#55292) [Uptime] Handle locations with names but no geo data (elastic#55234) ...
mikecote
added
release_note:enhancement
and removed
release_note:skip
1 task
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Resolves #45083.
Adds a persistent event log (writes to a new ES index) for use in actions and alerting (and really anyone) to be able to query over events that have occurred in the past. Eg, action created, action executed, alert fired, etc.