[SECURITY] Introduce kibana nav

x-pack/plugins/security_solution/common/constants.ts

@@ -34,6 +34,14 @@ export const DEFAULT_INTERVAL_VALUE = 300000; // ms
 export const DEFAULT_TIMEPICKER_QUICK_RANGES = 'timepicker:quickRanges';
 export const NO_ALERT_INDEX = 'no-alert-index-049FC71A-4C2C-446F-9901-37XMC5024C51';
 
+export const APP_OVERVIEW_PATH = `${APP_PATH}/overview`;
+export const APP_ALERTS_PATH = `${APP_PATH}/alerts`;
+export const APP_HOSTS_PATH = `${APP_PATH}/hosts`;
+export const APP_NETWORK_PATH = `${APP_PATH}/network`;
+export const APP_TIMELINES_PATH = `${APP_PATH}/timelines`;
+export const APP_CASES_PATH = `${APP_PATH}/cases`;
+export const APP_MANAGEMENT_PATH = `${APP_PATH}/management`;
+
 /** The comma-delimited list of Elasticsearch indices from which the SIEM app collects events */
 export const DEFAULT_INDEX_PATTERN = [
  'apm-*-transaction*',

x-pack/plugins/security_solution/cypress/integration/detections.spec.ts

@@ -28,13 +28,13 @@ import {
 import { esArchiverLoad } from '../tasks/es_archiver';
 import { loginAndWaitForPage } from '../tasks/login';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 describe('Detections', () => {
  context('Closing alerts', () => {
  beforeEach(() => {
  esArchiverLoad('alerts');
- loginAndWaitForPage(DETECTIONS);
+ loginAndWaitForPage(ALERTS_URL);
  });
 
  it('Closes and opens alerts', () => {
@@ -161,7 +161,7 @@ describe('Detections', () => {
  context('Opening alerts', () => {
  beforeEach(() => {
  esArchiverLoad('closed_alerts');
- loginAndWaitForPage(DETECTIONS);
+ loginAndWaitForPage(ALERTS_URL);
  });
 
  it('Open one alert when more than one closed alerts are selected', () => {
@@ -207,7 +207,7 @@ describe('Detections', () => {
  context('Marking alerts as in-progress', () => {
  beforeEach(() => {
  esArchiverLoad('alerts');
- loginAndWaitForPage(DETECTIONS);
+ loginAndWaitForPage(ALERTS_URL);
  });
 
  it('Mark one alert in progress when more than one open alerts are selected', () => {

x-pack/plugins/security_solution/cypress/integration/detections_timeline.spec.ts

@@ -15,12 +15,12 @@ import {
 import { esArchiverLoad, esArchiverUnload } from '../tasks/es_archiver';
 import { loginAndWaitForPage } from '../tasks/login';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 describe('Detections timeline', () => {
  beforeEach(() => {
  esArchiverLoad('timeline_alerts');
- loginAndWaitForPage(DETECTIONS);
+ loginAndWaitForPage(ALERTS_URL);
  });
 
  afterEach(() => {

x-pack/plugins/security_solution/cypress/integration/ml_conditional_links.spec.ts

@@ -101,103 +101,103 @@ describe('ml conditional links', () => {
  loginAndWaitForPageWithoutDateRange(mlNetworkSingleIpNullKqlQuery);
  cy.url().should(
  'include',
- '/app/security#/network/ip/127.0.0.1/source?timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
+ '/app/security/network/ip/127.0.0.1/source?timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
  );
  });
 
  it('redirects from a single IP with a value for the query', () => {
  loginAndWaitForPageWithoutDateRange(mlNetworkSingleIpKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/network/ip/127.0.0.1/source?query=(language:kuery,query:'(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)')&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))"
+ '/app/security/network/ip/127.0.0.1/source?query=(language:kuery,query:%27(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
  );
  });
 
  it('redirects from a multiple IPs with a null for the query', () => {
  loginAndWaitForPageWithoutDateRange(mlNetworkMultipleIpNullKqlQuery);
  cy.url().should(
  'include',
- "app/security#/network/flows?query=(language:kuery,query:'((source.ip:%20%22127.0.0.1%22%20or%20destination.ip:%20%22127.0.0.1%22)%20or%20(source.ip:%20%22127.0.0.2%22%20or%20destination.ip:%20%22127.0.0.2%22))')&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999))"
+ 'app/security/network/flows?query=(language:kuery,query:%27((source.ip:%20%22127.0.0.1%22%20or%20destination.ip:%20%22127.0.0.1%22)%20or%20(source.ip:%20%22127.0.0.2%22%20or%20destination.ip:%20%22127.0.0.2%22))%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999))'
  );
  });
 
  it('redirects from a multiple IPs with a value for the query', () => {
  loginAndWaitForPageWithoutDateRange(mlNetworkMultipleIpKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/network/flows?query=(language:kuery,query:'((source.ip:%20%22127.0.0.1%22%20or%20destination.ip:%20%22127.0.0.1%22)%20or%20(source.ip:%20%22127.0.0.2%22%20or%20destination.ip:%20%22127.0.0.2%22))%20and%20((process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22))')&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))"
+ '/app/security/network/flows?query=(language:kuery,query:%27((source.ip:%20%22127.0.0.1%22%20or%20destination.ip:%20%22127.0.0.1%22)%20or%20(source.ip:%20%22127.0.0.2%22%20or%20destination.ip:%20%22127.0.0.2%22))%20and%20((process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22))%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
  );
  });
 
  it('redirects from a $ip$ with a null query', () => {
  loginAndWaitForPageWithoutDateRange(mlNetworkNullKqlQuery);
  cy.url().should(
  'include',
- '/app/security#/network/flows?timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
+ '/app/security/network/flows?timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
  );
  });
 
  it('redirects from a $ip$ with a value for the query', () => {
  loginAndWaitForPageWithoutDateRange(mlNetworkKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/network/flows?query=(language:kuery,query:'(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)')&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))"
+ '/app/security/network/flows?query=(language:kuery,query:%27(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1566990000000,kind:absolute,to:1567000799999)),timeline:(linkTo:!(global),timerange:(from:1566990000000,kind:absolute,to:1567000799999)))'
  );
  });
 
  it('redirects from a single host name with a null for the query', () => {
  loginAndWaitForPageWithoutDateRange(mlHostSingleHostNullKqlQuery);
  cy.url().should(
  'include',
- '/app/security#/hosts/siem-windows/anomalies?timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
+ '/app/security/hosts/siem-windows/anomalies?timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 
  it('redirects from a host name with a variable in the query', () => {
  loginAndWaitForPageWithoutDateRange(mlHostSingleHostKqlQueryVariable);
  cy.url().should(
  'include',
- '/app/security#/hosts/siem-windows/anomalies?timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
+ '/app/security/hosts/siem-windows/anomalies?timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 
  it('redirects from a single host name with a value for query', () => {
  loginAndWaitForPageWithoutDateRange(mlHostSingleHostKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/hosts/siem-windows/anomalies?query=(language:kuery,query:'(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)')&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))"
+ '/app/security/hosts/siem-windows/anomalies?query=(language:kuery,query:%27(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 
  it('redirects from a multiple host names with null for query', () => {
  loginAndWaitForPageWithoutDateRange(mlHostMultiHostNullKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/hosts/anomalies?query=(language:kuery,query:'(host.name:%20%22siem-windows%22%20or%20host.name:%20%22siem-suricata%22)')&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))"
+ '/app/security/hosts/anomalies?query=(language:kuery,query:%27(host.name:%20%22siem-windows%22%20or%20host.name:%20%22siem-suricata%22)%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 
  it('redirects from a multiple host names with a value for query', () => {
  loginAndWaitForPageWithoutDateRange(mlHostMultiHostKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/hosts/anomalies?query=(language:kuery,query:'(host.name:%20%22siem-windows%22%20or%20host.name:%20%22siem-suricata%22)%20and%20((process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22))')&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))"
+ '/app/security/hosts/anomalies?query=(language:kuery,query:%27(host.name:%20%22siem-windows%22%20or%20host.name:%20%22siem-suricata%22)%20and%20((process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22))%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 
  it('redirects from a undefined/null host name with a null for the KQL', () => {
  loginAndWaitForPageWithoutDateRange(mlHostVariableHostNullKqlQuery);
  cy.url().should(
  'include',
- '/app/security#/hosts/anomalies?timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
+ '/app/security/hosts/anomalies?timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 
  it('redirects from a undefined/null host name but with a value for query', () => {
  loginAndWaitForPageWithoutDateRange(mlHostVariableHostKqlQuery);
  cy.url().should(
  'include',
- "/app/security#/hosts/anomalies?query=(language:kuery,query:'(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)')&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))"
+ '/app/security/hosts/anomalies?query=(language:kuery,query:%27(process.name:%20%22conhost.exe%22%20or%20process.name:%20%22sc.exe%22)%27)&timerange=(global:(linkTo:!(timeline),timerange:(from:1559800800000,kind:absolute,to:1559887199999)),timeline:(linkTo:!(global),timerange:(from:1559800800000,kind:absolute,to:1559887199999)))'
  );
  });
 });

x-pack/plugins/security_solution/cypress/integration/navigation.spec.ts

@@ -3,7 +3,7 @@
  * or more contributor license agreements. Licensed under the Elastic License;
  * you may not use this file except in compliance with the Elastic License.
  */
-import { DETECTIONS, HOSTS, NETWORK, OVERVIEW, TIMELINES } from '../screens/security_header';
+import { ALERTS, HOSTS, NETWORK, OVERVIEW, TIMELINES } from '../screens/security_header';
 
 import { loginAndWaitForPage } from '../tasks/login';
 import { navigateFromHeaderTo } from '../tasks/security_header';
@@ -16,26 +16,26 @@ describe('top-level navigation common to all pages in the Security app', () => {
  });
  it('navigates to the Overview page', () => {
  navigateFromHeaderTo(OVERVIEW);
- cy.url().should('include', '/security#/overview');
+ cy.url().should('include', '/security/overview');
  });
 
  it('navigates to the Hosts page', () => {
  navigateFromHeaderTo(HOSTS);
- cy.url().should('include', '/security#/hosts');
+ cy.url().should('include', '/security/hosts');
  });
 
  it('navigates to the Network page', () => {
  navigateFromHeaderTo(NETWORK);
- cy.url().should('include', '/security#/network');
+ cy.url().should('include', '/security/network');
  });
 
- it('navigates to the Detections page', () => {
- navigateFromHeaderTo(DETECTIONS);
- cy.url().should('include', '/security#/detections');
+ it('navigates to the Alerts page', () => {
+ navigateFromHeaderTo(ALERTS);
+ cy.url().should('include', '/security/alerts');
  });
 
  it('navigates to the Timelines page', () => {
  navigateFromHeaderTo(TIMELINES);
- cy.url().should('include', '/security#/timelines');
+ cy.url().should('include', '/security/timelines');
  });
 });

x-pack/plugins/security_solution/cypress/integration/signal_detection_rules.spec.ts

@@ -26,7 +26,7 @@ import {
  waitForRuleToBeActivated,
 } from '../tasks/alert_detection_rules';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 describe('Detection rules', () => {
  before(() => {
@@ -38,7 +38,7 @@ describe('Detection rules', () => {
  });
 
  it('Sorts by activated rules', () => {
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();

x-pack/plugins/security_solution/cypress/integration/signal_detection_rules_custom.spec.ts

@@ -62,7 +62,7 @@ import {
 import { esArchiverLoad, esArchiverUnload } from '../tasks/es_archiver';
 import { loginAndWaitForPageWithoutDateRange } from '../tasks/login';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 describe('Detection rules, custom', () => {
  before(() => {
@@ -74,7 +74,7 @@ describe('Detection rules, custom', () => {
  });
 
  it('Creates and activates a new custom rule', () => {
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();
@@ -169,7 +169,7 @@ describe('Detection rules, custom', () => {
 describe('Deletes custom rules', () => {
  beforeEach(() => {
  esArchiverLoad('custom_rules');
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();

x-pack/plugins/security_solution/cypress/integration/signal_detection_rules_export.spec.ts

@@ -13,7 +13,7 @@ import { esArchiverLoad, esArchiverUnload } from '../tasks/es_archiver';
 import { loginAndWaitForPageWithoutDateRange } from '../tasks/login';
 import { exportFirstRule } from '../tasks/alert_detection_rules';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 const EXPECTED_EXPORTED_RULE_FILE_PATH = 'cypress/test_files/expected_rules_export.ndjson';
 
@@ -32,7 +32,7 @@ describe('Export rules', () => {
  });
 
  it('Exports a custom rule', () => {
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();

x-pack/plugins/security_solution/cypress/integration/signal_detection_rules_ml.spec.ts

@@ -58,7 +58,7 @@ import {
 import { esArchiverLoad, esArchiverUnload } from '../tasks/es_archiver';
 import { loginAndWaitForPageWithoutDateRange } from '../tasks/login';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 describe('Detection rules, machine learning', () => {
  before(() => {
@@ -70,7 +70,7 @@ describe('Detection rules, machine learning', () => {
  });
 
  it('Creates and activates a new ml rule', () => {
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();

x-pack/plugins/security_solution/cypress/integration/signal_detection_rules_prebuilt.spec.ts

@@ -31,7 +31,7 @@ import {
 import { esArchiverLoadEmptyKibana, esArchiverUnloadEmptyKibana } from '../tasks/es_archiver';
 import { loginAndWaitForPageWithoutDateRange } from '../tasks/login';
 
-import { DETECTIONS } from '../urls/navigation';
+import { ALERTS_URL } from '../urls/navigation';
 
 import { totalNumberOfPrebuiltRules } from '../objects/rule';
 
@@ -48,7 +48,7 @@ describe('Detection rules, prebuilt rules', () => {
  const expectedNumberOfRules = totalNumberOfPrebuiltRules;
  const expectedElasticRulesBtnText = `Elastic rules (${expectedNumberOfRules})`;
 
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();
@@ -73,7 +73,7 @@ describe('Deleting prebuilt rules', () => {
  const expectedElasticRulesBtnText = `Elastic rules (${expectedNumberOfRules})`;
 
  esArchiverLoadEmptyKibana();
- loginAndWaitForPageWithoutDateRange(DETECTIONS);
+ loginAndWaitForPageWithoutDateRange(ALERTS_URL);
  waitForAlertsPanelToBeLoaded();
  waitForAlertsIndexToBeCreated();
  goToManageAlertDetectionRules();

x-pack/plugins/security_solution/cypress/integration/url_compatibility.spec.ts

@@ -0,0 +1,17 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+
+import { loginAndWaitForPage } from '../tasks/login';
+
+import { DETECTIONS } from '../urls/navigation';
+
+describe('URL compatibility', () => {
+ it('Redirects to Alerts from old Detections URL', () => {
+ loginAndWaitForPage(DETECTIONS);
+
+ cy.url().should('include', '/security/alerts');
+ });
+});