Testing compatibility with Kibana 7.13.4 and 7.14.2

[frankeros]

Wazuh	Elastic
4.2.2	7.13.4/7.14.2

Description
Testing compatibility with Kibana 7.13.0

Test type:

• Regression

Test with browsers:

• Chrome
• Firefox
• Safari

Test with the theme:

• Light
• Dark

Checks:

• General checks
• X-Pack checks

Issues related:

• The interactive screen of new agent breaks when selecting the WindowsOS option #3636
• Compatibility error wazuh 4.2.2 - elastic 7.13.4 #3629
• 'Export formated' button does not work #3576

[Machi3mfl]

Kibana 7.13.4 and Wazuh Kibana 4.2.2 incompatibility.

• Implemented xpack environment 4.2.2-rc1-7.13.4 in production mode
• Implemented xpack environment 4.2.2-rc1-7.13.4 in development mode

Researching about compatibility problem (In progress)

Errors Screenshots in UI:

Debugging errors

Catching error in console

Error in chunk file
logInspectorRequest (https://localhost:5601/9007199254740991/bundles/plugin/wazuh/4.2.2-4203-1/wazuh.chunk.1.js:211117:118)

Error in kibana-discover > logInspectorRequest > getRequestInspectorStats

[matiasmoreno876]

Kibana 7.14.2 and Wazuh Kibana 4.2.2 incompatibility.

• Implemented xpack environment 4.2.2-rc1-7.14.2 in production mode
• Implemented xpack environment 4.2.2-rc1-7.14.2 in development mode

Researching about compatibility problem (In progress)

When we enter the main screen of the health check, the app cannot advance even though the checks have been carried out correctly

Errors Screenshots in UI:

[Machi3mfl]

Changes Notes Kibana 7.11.2 to 7.13.4 - Resolving incompatibility

Error in kibana/src/plugins/data/common/search/search_source/inspect/inspector_stats.ts > getRequestInspectorStats

• function getRequestInspectorStats is not public in new version. Not exported

Posible Solution: Copy the function and pasted in wazuh kibana-services.js

Before - After

Error in /kibana/src/plugins/data/common/search/search_source/search_source.ts

• function $scope.searchSource.getSearchRequestBody() changed to sync (before async)

Posible Solution: remove .then in kibana-discover.js

Before - After

[matiasmoreno876]

Wazuh 4.2.2 status update and Kibana 7.14.2 in development mode

Currently the application runs in development mode with the changes made as detailed by @Machi3mfl above.

screenshot

But when we want to generate a package to test in production environments, we get the following error:

[CPAlejandro]

Bugs and issues found in 7.13.4

• When we switch the size of the windows in Agent pannel, this error appear:
  

• In the Wazuh Menu same Pannels like Management or Setting appear in a different form
  

Current feedback:
I have tested all tests that don't involve the Events part that are being fixed in this PR for Chrome in Kibana 7.13.4

[CPAlejandro]

We have found this error while we tried to build a package (with yarn build) of the app for Kibana 7.14.2:

We found a solution following these steps:

• Modify the file: /src/plugins/discover/application/apps/main/components/layout/discover_layout.scss
• Change @import 'src/core/public/mixins --> @import '../../../../../../../../core/public/mixins';

[matiasmoreno876]

Bugs and issues found in 7.14.2

Reporting
graphics are not displayed

Should work with no custom filters.

Using custom filters, the report must apply the custom filters.

Using custom filters and custom query, the report must apply the custom filters and the custom query.

Using a custom query, the report must apply the custom query.

Agents Preview
Interactive screen breaks

Changing OS should refresh the snippet in the interactive guide.

[Desvelao]

Manual testing 4.2.4-7.13.4 - No security - Google Chrome

I found the next problems:

UI

• Menu

  • Section title color
    
    

• Management directory

  • Missing panel titles
    
    

• Modules/Security Configuration Assessment

  • Missing panel titles
    
    

• Buttons

  • Health check. Refresh button has a border when it should not
    
  • Modules//Events. Expand document has a border when it should not
    

Behavior

• Index patterns
  The index patterns added manually which match with indices name of Wazuh alerts are not displayed in the UI. The index pattern selector doesn't appear.

I was researching a little bit and I saw when the app gets all the index patterns to check if they are compatible with the Wazuh alert's requirements, the attribute fields is empty ([]) and it is required to do the checks. I am not sure if Kibana changed the response or as the index pattern fields are managed. We should research more about this. My environment had Kibana spaces and I am not sure if this could be related.

• Editing the manager configuration or group's agent.conf'.
  Edit the file, save and click on the back button near to panel title and appears a prompt saying there are unsaved changes.

[CPAlejandro]

Manual testing 4.2.4-7.10.2 - X-Pack - Safari

Fixs or bugs found:

• Management/Configuration and Group/Configuration section have the same issue, if you change one of these configuration, save it and then try to click to the return button, the prompt that remind you that the changes didn't been save appear.

• In an agent section, in Inventory Data, this table could be better space distributed:
  

• The index selector could be better shown to imply that what follows is the selector itself, since it can give the impression of being used for different thing