[Security Solution] Refactor Network HTTP to use Search Strategy (#76243

) (#76484)

x-pack/plugins/security_solution/common/search_strategy/security_solution/index.ts

@@ -15,7 +15,13 @@ import {
  HostsRequestOptions,
  HostsStrategyResponse,
 } from './hosts';
-import { NetworkQueries, NetworkTlsStrategyResponse, NetworkTlsRequestOptions } from './network';
+import {
+ NetworkQueries,
+ NetworkTlsStrategyResponse,
+ NetworkTlsRequestOptions,
+ NetworkHttpStrategyResponse,
+ NetworkHttpRequestOptions,
+} from './network';
 
 export * from './hosts';
 export * from './network';
@@ -116,6 +122,8 @@ export type StrategyResponseType<T extends FactoryQueryTypes> = T extends HostsQ
  ? HostFirstLastSeenStrategyResponse
  : T extends NetworkQueries.tls
  ? NetworkTlsStrategyResponse
+ : T extends NetworkQueries.http
+ ? NetworkHttpStrategyResponse
  : never;
 
 export type StrategyRequestType<T extends FactoryQueryTypes> = T extends HostsQueries.hosts
@@ -126,4 +134,11 @@ export type StrategyRequestType<T extends FactoryQueryTypes> = T extends HostsQu
  ? HostFirstLastSeenRequestOptions
  : T extends NetworkQueries.tls
  ? NetworkTlsRequestOptions
+ : T extends NetworkQueries.http
+ ? NetworkHttpRequestOptions
  : never;
+
+export interface GenericBuckets {
+ key: string;
+ doc_count: number;
+}

x-pack/plugins/security_solution/common/search_strategy/security_solution/network/http/index.ts

@@ -0,0 +1,58 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+
+import { IEsSearchResponse } from '../../../../../../../../src/plugins/data/common';
+import {
+ Maybe,
+ CursorType,
+ Inspect,
+ RequestOptionsPaginated,
+ PageInfoPaginated,
+ GenericBuckets,
+} from '../..';
+
+export interface NetworkHttpRequestOptions extends RequestOptionsPaginated {
+ ip?: string;
+ defaultIndex: string[];
+}
+
+export interface NetworkHttpStrategyResponse extends IEsSearchResponse {
+ edges: NetworkHttpEdges[];
+ totalCount: number;
+ pageInfo: PageInfoPaginated;
+ inspect?: Maybe<Inspect>;
+}
+
+export interface NetworkHttpEdges {
+ node: NetworkHttpItem;
+ cursor: CursorType;
+}
+
+export interface NetworkHttpItem {
+ _id?: Maybe<string>;
+ domains: string[];
+ lastHost?: Maybe<string>;
+ lastSourceIp?: Maybe<string>;
+ methods: string[];
+ path?: Maybe<string>;
+ requestCount?: Maybe<number>;
+ statuses: string[];
+}
+
+export interface NetworkHttpBuckets {
+ key: string;
+ doc_count: number;
+ domains: {
+ buckets: GenericBuckets[];
+ };
+ methods: {
+ buckets: GenericBuckets[];
+ };
+ source: object;
+ status: {
+ buckets: GenericBuckets[];
+ };
+}

x-pack/plugins/security_solution/common/search_strategy/security_solution/network/index.ts

@@ -5,7 +5,9 @@
  */
 
 export * from './tls';
+export * from './http';
 
 export enum NetworkQueries {
+ http = 'http',
  tls = 'tls',
 }