[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

kibanamachine · 2021-09-02T18:29:48Z

Backports the following commits to 7.x:

[Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. ([Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. #109253)

…or Match rules to ignore custom rule filters if a saved query was used in the rule definition. (elastic#109253) * Ignore saved_id for Threat match and threshold rules Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>

rylnd · 2021-09-03T20:13:53Z

@elasticmachine merge upstream

rylnd · 2021-09-07T21:34:19Z

@elasticmachine merge upstream

kibanamachine · 2021-09-08T00:57:33Z

💛 Build succeeded, but was flaky

continuous-integration/kibana-ci/pull-request
Commit: fb1f214
Storybooks Preview
Documentation Changes
Flaky suites:
- xpack-kibana-ciGroup4

Test Failures

Kibana Pipeline / general / Chrome X-Pack UI Functional Tests.x-pack/test/functional/apps/lens/drag_and_drop·ts.lens app lens drag and drop tests basic drag and drop should construct the basic split xy chart

Link to Jenkins

Standard Out

Failed Tests Reporter:
  - Test has failed 7 times on tracked branches: https://github.com/elastic/kibana/issues/108352

[00:00:00]       │
[00:11:13]         └-: lens app
[00:11:13]           └-> "before all" hook in "lens app"
[00:11:13]           └-> "before all" hook in "lens app"
[00:11:13]             │ debg Starting lens before method
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Loading "mappings.json"
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Loading "data.json.gz"
[00:11:13]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [logstash-2015.09.22/3VNFIzNlRLaRaRIBrcreuw] deleting index
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Deleted existing index "logstash-2015.09.22"
[00:11:13]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [logstash-2015.09.22] creating index, cause [api], templates [], shards [1]/[0]
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Created index "logstash-2015.09.22"
[00:11:13]             │ debg [x-pack/test/functional/es_archives/logstash_functional] "logstash-2015.09.22" settings {"index":{"analysis":{"analyzer":{"url":{"max_token_length":"1000","tokenizer":"uax_url_email","type":"standard"}}},"number_of_replicas":"0","number_of_shards":"1"}}
[00:11:13]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [logstash-2015.09.20/NWXZX4IoRVKMuqEJ9uF57A] deleting index
[00:11:13]             │ info [x-pack/test/functional/es_archives/logstash_functional] Deleted existing index "logstash-2015.09.20"
[00:11:13]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [logstash-2015.09.20] creating index, cause [api], templates [], shards [1]/[0]
[00:11:14]             │ info [x-pack/test/functional/es_archives/logstash_functional] Created index "logstash-2015.09.20"
[00:11:14]             │ debg [x-pack/test/functional/es_archives/logstash_functional] "logstash-2015.09.20" settings {"index":{"analysis":{"analyzer":{"url":{"max_token_length":"1000","tokenizer":"uax_url_email","type":"standard"}}},"number_of_replicas":"0","number_of_shards":"1"}}
[00:11:14]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [logstash-2015.09.21/q03gWKNhSv625lTxwZQKmg] deleting index
[00:11:14]             │ info [x-pack/test/functional/es_archives/logstash_functional] Deleted existing index "logstash-2015.09.21"
[00:11:14]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [logstash-2015.09.21] creating index, cause [api], templates [], shards [1]/[0]
[00:11:14]             │ info [x-pack/test/functional/es_archives/logstash_functional] Created index "logstash-2015.09.21"
[00:11:14]             │ debg [x-pack/test/functional/es_archives/logstash_functional] "logstash-2015.09.21" settings {"index":{"analysis":{"analyzer":{"url":{"max_token_length":"1000","tokenizer":"uax_url_email","type":"standard"}}},"number_of_replicas":"0","number_of_shards":"1"}}
[00:11:14]             │ info [o.e.c.m.MetadataMappingService] [node-01] [logstash-2015.09.21/MhgLGiGwSeW5tJxNHNi4Vg] update_mapping [_doc]
[00:11:18]             │ info [o.e.c.m.MetadataMappingService] [node-01] [logstash-2015.09.20/5t-i_aErSsS2WbUPqgGJEw] update_mapping [_doc]
[00:11:23]             │ info progress: 10230
[00:11:26]             │ info [x-pack/test/functional/es_archives/logstash_functional] Indexed 4634 docs into "logstash-2015.09.22"
[00:11:26]             │ info [x-pack/test/functional/es_archives/logstash_functional] Indexed 4757 docs into "logstash-2015.09.20"
[00:11:26]             │ info [x-pack/test/functional/es_archives/logstash_functional] Indexed 4614 docs into "logstash-2015.09.21"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Loading "mappings.json"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Loading "data.json"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Loading "data.json.gz"
[00:11:27]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_1/BERA1Na2QbWJ2Q8KbGlDhw] deleting index
[00:11:27]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_task_manager_7.16.0_001/PG-EzmIOR6y3RNLngeTKyA] deleting index
[00:11:27]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_7.16.0_001/6_1VTU4ATW27sm_FlKOmlg] deleting index
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Deleted existing index ".kibana_task_manager_7.16.0_001"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Deleted existing index ".kibana_7.16.0_001"
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Deleted existing index ".kibana_1"
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_1] creating index, cause [api], templates [], shards [1]/[0]
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Created index ".kibana_1"
[00:11:27]             │ debg [x-pack/test/functional/es_archives/lens/basic] ".kibana_1" settings {"index":{"auto_expand_replicas":"0-1","number_of_replicas":"0","number_of_shards":"1"}}
[00:11:27]             │ info [x-pack/test/functional/es_archives/lens/basic] Indexed 24 docs into ".kibana_1"
[00:11:27]             │ debg Migrating saved objects
[00:11:27]             │ proc [kibana]   log   [22:16:45.730] [info][savedobjects-service] [.kibana_task_manager] INIT -> CREATE_NEW_TARGET. took: 3ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.733] [info][savedobjects-service] [.kibana] INIT -> WAIT_FOR_YELLOW_SOURCE. took: 9ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.736] [info][savedobjects-service] [.kibana] WAIT_FOR_YELLOW_SOURCE -> CHECK_UNKNOWN_DOCUMENTS. took: 3ms.
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_task_manager_7.16.0_001] creating index, cause [api], templates [], shards [1]/[1]
[00:11:27]             │ info [o.e.c.r.a.AllocationService] [node-01] updating number_of_replicas to [0] for indices [.kibana_task_manager_7.16.0_001]
[00:11:27]             │ proc [kibana]   log   [22:16:45.743] [info][savedobjects-service] [.kibana] CHECK_UNKNOWN_DOCUMENTS -> SET_SOURCE_WRITE_BLOCK. took: 7ms.
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] adding block write to indices [[.kibana_1/fJtHqf-eSoyWTOqQ2dP69w]]
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] completed adding block write to indices [.kibana_1]
[00:11:27]             │ proc [kibana]   log   [22:16:45.807] [info][savedobjects-service] [.kibana_task_manager] CREATE_NEW_TARGET -> MARK_VERSION_INDEX_READY. took: 77ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.823] [info][savedobjects-service] [.kibana] SET_SOURCE_WRITE_BLOCK -> CALCULATE_EXCLUDE_FILTERS. took: 80ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.829] [info][savedobjects-service] [.kibana] CALCULATE_EXCLUDE_FILTERS -> CREATE_REINDEX_TEMP. took: 6ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.845] [info][savedobjects-service] [.kibana_task_manager] MARK_VERSION_INDEX_READY -> DONE. took: 38ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.846] [info][savedobjects-service] [.kibana_task_manager] Migration completed after 119ms
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_7.16.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1]
[00:11:27]             │ info [o.e.c.r.a.AllocationService] [node-01] updating number_of_replicas to [0] for indices [.kibana_7.16.0_reindex_temp]
[00:11:27]             │ proc [kibana]   log   [22:16:45.906] [info][savedobjects-service] [.kibana] CREATE_REINDEX_TEMP -> REINDEX_SOURCE_TO_TEMP_OPEN_PIT. took: 77ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.910] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_OPEN_PIT -> REINDEX_SOURCE_TO_TEMP_READ. took: 4ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.919] [info][savedobjects-service] [.kibana] Starting to process 12 documents.
[00:11:27]             │ proc [kibana]   log   [22:16:45.919] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_READ -> REINDEX_SOURCE_TO_TEMP_INDEX. took: 9ms.
[00:11:27]             │ proc [kibana]   log   [22:16:45.956] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_INDEX -> REINDEX_SOURCE_TO_TEMP_INDEX_BULK. took: 37ms.
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] update_mapping [_doc]
[00:11:27]             │ proc [kibana]   log   [22:16:46.109] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_INDEX_BULK -> REINDEX_SOURCE_TO_TEMP_READ. took: 153ms.
[00:11:27]             │ proc [kibana]   log   [22:16:46.117] [info][savedobjects-service] [.kibana] Processed 12 documents out of 12.
[00:11:27]             │ proc [kibana]   log   [22:16:46.117] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_READ -> REINDEX_SOURCE_TO_TEMP_CLOSE_PIT. took: 7ms.
[00:11:27]             │ proc [kibana]   log   [22:16:46.121] [info][savedobjects-service] [.kibana] REINDEX_SOURCE_TO_TEMP_CLOSE_PIT -> SET_TEMP_WRITE_BLOCK. took: 5ms.
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] adding block write to indices [[.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q]]
[00:11:27]             │ info [o.e.c.m.MetadataIndexStateService] [node-01] completed adding block write to indices [.kibana_7.16.0_reindex_temp]
[00:11:27]             │ proc [kibana]   log   [22:16:46.168] [info][savedobjects-service] [.kibana] SET_TEMP_WRITE_BLOCK -> CLONE_TEMP_TO_TARGET. took: 47ms.
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] applying create index request using existing index [.kibana_7.16.0_reindex_temp] metadata
[00:11:27]             │ info [o.e.c.m.MetadataCreateIndexService] [node-01] [.kibana_7.16.0_001] creating index, cause [clone_index], templates [], shards [1]/[1]
[00:11:27]             │ info [o.e.c.r.a.AllocationService] [node-01] updating number_of_replicas to [0] for indices [.kibana_7.16.0_001]
[00:11:28]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_001/uGXdL1RxTSelsXPYLjgPog] create_mapping [_doc]
[00:11:28]             │ proc [kibana]   log   [22:16:46.297] [info][savedobjects-service] [.kibana] CLONE_TEMP_TO_TARGET -> REFRESH_TARGET. took: 129ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.301] [info][savedobjects-service] [.kibana] REFRESH_TARGET -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 4ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.304] [info][savedobjects-service] [.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 3ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.311] [info][savedobjects-service] [.kibana] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 7ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.314] [info][savedobjects-service] [.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 3ms.
[00:11:28]             │ info [o.e.c.m.MetadataMappingService] [node-01] [.kibana_7.16.0_001/uGXdL1RxTSelsXPYLjgPog] update_mapping [_doc]
[00:11:28]             │ proc [kibana]   log   [22:16:46.380] [info][savedobjects-service] [.kibana] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 66ms.
[00:11:28]             │ info [o.e.t.LoggingTaskListener] [node-01] 21329 finished with response BulkByScrollResponse[took=38.5ms,timed_out=false,sliceId=null,updated=12,created=0,deleted=0,batches=1,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]]
[00:11:28]             │ proc [kibana]   log   [22:16:46.485] [info][savedobjects-service] [.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> MARK_VERSION_INDEX_READY. took: 105ms.
[00:11:28]             │ info [o.e.c.m.MetadataDeleteIndexService] [node-01] [.kibana_7.16.0_reindex_temp/dKmM38HqTQqL2hli8dKo4Q] deleting index
[00:11:28]             │ proc [kibana]   log   [22:16:46.528] [info][savedobjects-service] [.kibana] MARK_VERSION_INDEX_READY -> DONE. took: 43ms.
[00:11:28]             │ proc [kibana]   log   [22:16:46.528] [info][savedobjects-service] [.kibana] Migration completed after 804ms
[00:11:28]             │ debg [x-pack/test/functional/es_archives/lens/basic] Migrated Kibana index after loading Kibana data
[00:11:28]             │ debg [x-pack/test/functional/es_archives/lens/basic] Ensured that default space exists in .kibana
[00:11:28]             │ debg applying update to kibana config: {"accessibility:disableAnimations":true,"dateFormat:tz":"UTC","visualization:visualize:legacyChartsLibrary":true,"visualization:visualize:legacyPieChartsLibrary":true}
[00:11:30]           └-: 
[00:11:30]             └-> "before all" hook in ""
[01:05:50]             └-: lens drag and drop tests
[01:05:50]               └-> "before all" hook in "lens drag and drop tests"
[01:05:50]               └-: basic drag and drop
[01:05:50]                 └-> "before all" hook for "should construct the basic split xy chart"
[01:05:50]                 └-> should construct the basic split xy chart
[01:05:50]                   └-> "before each" hook: global before each for "should construct the basic split xy chart"
[01:05:50]                   │ debg navigating to visualize url: http://localhost:61221/app/visualize#/
[01:05:50]                   │ debg navigate to: http://localhost:61221/app/visualize#/
[01:05:50]                   │ debg ... sleep(700) start
[01:05:50]                   │ debg browser[INFO] http://localhost:61221/app/visualize?_t=1631056268808#/ 281 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[01:05:50]                   │
[01:05:50]                   │ debg browser[INFO] http://localhost:61221/bootstrap.js 41:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[01:05:51]                   │ debg ... sleep(700) end
[01:05:51]                   │ debg returned from get, calling refresh
[01:05:53]                   │ debg browser[INFO] http://localhost:61221/app/visualize?_t=1631056268808#/ 281 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[01:05:53]                   │
[01:05:53]                   │ debg browser[INFO] http://localhost:61221/bootstrap.js 41:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[01:05:53]                   │ debg currentUrl = http://localhost:61221/app/visualize#/
[01:05:53]                   │          appUrl = http://localhost:61221/app/visualize#/
[01:05:53]                   │ debg TestSubjects.find(kibanaChrome)
[01:05:53]                   │ debg Find.findByCssSelector('[data-test-subj="kibanaChrome"]') with timeout=60000
[01:05:53]                   │ debg ... sleep(501) start
[01:05:54]                   │ debg ... sleep(501) end
[01:05:54]                   │ debg in navigateTo url = http://localhost:61221/app/visualize#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))
[01:05:54]                   │ debg --- retry.tryForTime error: URL changed, waiting for it to settle
[01:05:54]                   │ debg ... sleep(501) start
[01:05:55]                   │ debg ... sleep(501) end
[01:05:55]                   │ debg in navigateTo url = http://localhost:61221/app/visualize#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))
[01:05:55]                   │ debg isGlobalLoadingIndicatorVisible
[01:05:55]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:05:55]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:05:56]                   │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[01:05:57]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:05:57]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:05:57]                   │ debg TestSubjects.exists(newItemButton)
[01:05:57]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="newItemButton"]') with timeout=10000
[01:05:57]                   │ debg TestSubjects.click(newItemButton)
[01:05:57]                   │ debg Find.clickByCssSelector('[data-test-subj="newItemButton"]') with timeout=10000
[01:05:57]                   │ debg Find.findByCssSelector('[data-test-subj="newItemButton"]') with timeout=10000
[01:05:57]                   │ debg TestSubjects.find(visNewDialogGroups)
[01:05:57]                   │ debg Find.findByCssSelector('[data-test-subj="visNewDialogGroups"]') with timeout=10000
[01:05:57]                   │ debg TestSubjects.click(visType-lens)
[01:05:57]                   │ debg Find.clickByCssSelector('[data-test-subj="visType-lens"]') with timeout=10000
[01:05:57]                   │ debg Find.findByCssSelector('[data-test-subj="visType-lens"]') with timeout=10000
[01:05:57]                   │ debg isGlobalLoadingIndicatorVisible
[01:05:57]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:05:57]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:05:59]                   │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[01:05:59]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:05:59]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:05:59]                   │ debg lensPage.goToTimeRange()
[01:05:59]                   │ debg TestSubjects.exists(noDataPopoverDismissButton)
[01:05:59]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="noDataPopoverDismissButton"]') with timeout=2500
[01:05:59]                   │ debg TestSubjects.click(noDataPopoverDismissButton)
[01:05:59]                   │ debg Find.clickByCssSelector('[data-test-subj="noDataPopoverDismissButton"]') with timeout=10000
[01:05:59]                   │ debg Find.findByCssSelector('[data-test-subj="noDataPopoverDismissButton"]') with timeout=10000
[01:05:59]                   │ debg Setting absolute range to Sep 19, 2015 @ 06:31:44.000 to Sep 23, 2015 @ 18:31:44.000
[01:05:59]                   │ debg TestSubjects.exists(superDatePickerToggleQuickMenuButton)
[01:05:59]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerToggleQuickMenuButton"]') with timeout=20000
[01:06:00]                   │ debg TestSubjects.exists(superDatePickerShowDatesButton)
[01:06:00]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerShowDatesButton"]') with timeout=2500
[01:06:00]                   │ debg TestSubjects.click(superDatePickerShowDatesButton)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerShowDatesButton"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerShowDatesButton"]') with timeout=10000
[01:06:00]                   │ debg TestSubjects.exists(superDatePickerstartDatePopoverButton)
[01:06:00]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerstartDatePopoverButton"]') with timeout=2500
[01:06:00]                   │ debg TestSubjects.click(superDatePickerendDatePopoverButton)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerendDatePopoverButton"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerendDatePopoverButton"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('div.euiPopover__panel-isOpen') with timeout=10000
[01:06:00]                   │ debg TestSubjects.click(superDatePickerAbsoluteTab)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:00]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:00]                   │ debg TestSubjects.setValue(superDatePickerAbsoluteDateInput, Sep 23, 2015 @ 18:31:44.000)
[01:06:00]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:00]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:00]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg TestSubjects.click(superDatePickerstartDatePopoverButton)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerstartDatePopoverButton"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerstartDatePopoverButton"]') with timeout=10000
[01:06:01]                   │ debg Find.waitForElementStale with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('div.euiPopover__panel-isOpen') with timeout=10000
[01:06:01]                   │ debg TestSubjects.click(superDatePickerAbsoluteTab)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteTab"]') with timeout=10000
[01:06:01]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg TestSubjects.setValue(superDatePickerAbsoluteDateInput, Sep 19, 2015 @ 06:31:44.000)
[01:06:01]                   │ debg TestSubjects.click(superDatePickerAbsoluteDateInput)
[01:06:01]                   │ debg Find.clickByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:01]                   │ debg Find.findByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=10000
[01:06:02]                   │ debg Waiting up to 20000ms for Timepicker popover to close...
[01:06:02]                   │ debg TestSubjects.exists(superDatePickerAbsoluteDateInput)
[01:06:02]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerAbsoluteDateInput"]') with timeout=2500
[01:06:02]                   │ debg --- retry.tryForTime error: [data-test-subj="superDatePickerAbsoluteDateInput"] is not displayed
[01:06:05]                   │ debg --- retry.tryForTime failed again with the same message...
[01:06:05]                   │ debg TestSubjects.exists(superDatePickerApplyTimeButton)
[01:06:05]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="superDatePickerApplyTimeButton"]') with timeout=2500
[01:06:08]                   │ debg --- retry.tryForTime error: [data-test-subj="superDatePickerApplyTimeButton"] is not displayed
[01:06:08]                   │ debg TestSubjects.click(querySubmitButton)
[01:06:08]                   │ debg Find.clickByCssSelector('[data-test-subj="querySubmitButton"]') with timeout=10000
[01:06:08]                   │ debg Find.findByCssSelector('[data-test-subj="querySubmitButton"]') with timeout=10000
[01:06:09]                   │ debg Find.waitForElementStale with timeout=10000
[01:06:09]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:06:09]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:06:09]                   │ debg isGlobalLoadingIndicatorVisible
[01:06:09]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:06:09]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:06:09]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:06:09]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:06:09]                   │ debg lensPage.dragFieldToWorkspace('@timestamp')
[01:06:09]                   │ debg Find.existsByCssSelector('lnsFieldListPanelField-@timestamp') with timeout=2500
[01:06:10]                   │ debg lensPage.waitForLensDragDropToFinish()
[01:06:10]                   │ debg Find.existsByCssSelector('.lnsDragDrop-isActiveGroup') with timeout=2500
[01:06:12]                   │ debg isGlobalLoadingIndicatorVisible
[01:06:12]                   │ debg TestSubjects.exists(globalLoadingIndicator)
[01:06:12]                   │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[01:06:14]                   │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[01:06:14]                   │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[01:06:14]                   │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[01:06:14]                   │ debg lensPage.getDimensionTriggerText('lnsXY_xDimensionPanel')
[01:06:14]                   │ debg lensPage.getDimensionTriggersTexts('lnsXY_xDimensionPanel')
[01:06:14]                   │ debg TestSubjects.findAll(lnsXY_xDimensionPanel > lns-dimensionTrigger)
[01:06:14]                   │ debg Find.allByCssSelector('[data-test-subj="lnsXY_xDimensionPanel"] [data-test-subj="lns-dimensionTrigger"]') with timeout=10000
[01:06:24]                   │ info Taking screenshot "/dev/shm/workspace/parallel/22/kibana/x-pack/test/functional/screenshots/failure/lens app  lens drag and drop tests basic drag and drop should construct the basic split xy chart.png"
[01:06:25]                   │ info Current URL is: http://localhost:61221/app/lens#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:%272015-09-19T06:31:44.000Z%27,to:%272015-09-23T18:31:44.000Z%27))
[01:06:25]                   │ info Saving page source to: /dev/shm/workspace/parallel/22/kibana/x-pack/test/functional/failure_debug/html/lens app  lens drag and drop tests basic drag and drop should construct the basic split xy chart.html
[01:06:25]                   └- ✖ fail: lens app  lens drag and drop tests basic drag and drop should construct the basic split xy chart
[01:06:25]                   │      Error: expected undefined to sort of equal '@timestamp'
[01:06:25]                   │       at Assertion.assert (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:100:11)
[01:06:25]                   │       at Assertion.eql (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:244:8)
[01:06:25]                   │       at Context.<anonymous> (test/functional/apps/lens/drag_and_drop.ts:23:92)
[01:06:25]                   │       at runMicrotasks (<anonymous>)
[01:06:25]                   │       at processTicksAndRejections (internal/process/task_queues.js:95:5)
[01:06:25]                   │       at Object.apply (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/test/target_node/functional_test_runner/lib/mocha/wrap_function.js:87:16)
[01:06:25]                   │ 
[01:06:25]                   │

Stack Trace

Error: expected undefined to sort of equal '@timestamp'
    at Assertion.assert (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:100:11)
    at Assertion.eql (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/expect/expect.js:244:8)
    at Context.<anonymous> (test/functional/apps/lens/drag_and_drop.ts:23:92)
    at runMicrotasks (<anonymous>)
    at processTicksAndRejections (internal/process/task_queues.js:95:5)
    at Object.apply (/dev/shm/workspace/parallel/22/kibana/node_modules/@kbn/test/target_node/functional_test_runner/lib/mocha/wrap_function.js:87:16) {
  actual: undefined,
  expected: '@timestamp',
  showDiff: true
}

Metrics [docs]

✅ unchanged

History

💔 Build #151079 failed b5260d1

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @nkhristinin

kibanamachine assigned nkhristinin Sep 2, 2021

kibanamachine added the backport This PR is a backport of another PR label Sep 2, 2021

kibanamachine enabled auto-merge (squash) September 2, 2021 18:29

kibanamachine mentioned this pull request Sep 2, 2021

[Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. #109253

Merged

2 tasks

Merge branch '7.x' into backport/7.x/pr-109253

b5260d1

Merge branch '7.x' into backport/7.x/pr-109253

fb1f214

kibanamachine merged commit cac2c82 into elastic:7.x Sep 8, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

Uh oh!

kibanamachine commented Sep 2, 2021

Uh oh!

rylnd commented Sep 3, 2021

Uh oh!

rylnd commented Sep 7, 2021

Uh oh!

kibanamachine commented Sep 8, 2021

Standard Out

Stack Trace

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

[7.x] [Security Solution] [CTI] Fixes bug that caused Threshold and Indicator Match rules to ignore custom rule filters if a saved query was used in the rule definition. (#109253) #111024

Uh oh!

Conversation

kibanamachine commented Sep 2, 2021

Uh oh!

rylnd commented Sep 3, 2021

Uh oh!

rylnd commented Sep 7, 2021

Uh oh!

kibanamachine commented Sep 8, 2021

💛 Build succeeded, but was flaky

Test Failures

Standard Out

Stack Trace

Metrics [docs]

History

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants