Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security Solution] Init Osquery plugin #87109

Merged
merged 64 commits into from
Jan 28, 2021

Conversation

patrykkopycinski
Copy link
Contributor

@patrykkopycinski patrykkopycinski commented Jan 3, 2021

Summary

Queries list:
queries

Query form view:
new query

Query agents response view:
query agents response status

Query results view:
query results

nchaulet and others added 30 commits December 16, 2020 16:12
…ub.com:patrykkopycinski/kibana into feat/init-osquery

# Conflicts:
#	x-pack/plugins/fleet/server/services/agents/acks.ts
#	x-pack/plugins/fleet/server/services/agents/crud.ts
#	x-pack/plugins/fleet/server/services/agents/crud_fleet_server.ts
#	x-pack/plugins/fleet/server/services/agents/helpers.ts
#	x-pack/plugins/security_solution/server/endpoint/services/artifacts/manifest_manager/manifest_manager.ts
…uery

# Conflicts:
#	src/core/server/saved_objects/saved_objects_service.mock.ts
#	x-pack/plugins/fleet/server/plugin.ts
#	x-pack/plugins/fleet/server/services/agents/unenroll.ts
#	x-pack/plugins/fleet/server/services/api_keys/enrollment_api_key.ts
@patrykkopycinski patrykkopycinski self-assigned this Jan 27, 2021
@patrykkopycinski patrykkopycinski added Team:Threat Hunting Security Solution Threat Hunting Team Team:Asset Management Security Asset Management Team v7.12.0 v8.0.0 release_note:enhancement labels Jan 27, 2021
@patrykkopycinski patrykkopycinski changed the title Feat/init osquery [Security Solution] Init Osquery plugin Jan 27, 2021
@patrykkopycinski patrykkopycinski added Feature:Osquery Security Solution Osquery feature and removed Team:Threat Hunting Security Solution Threat Hunting Team labels Jan 27, 2021
@patrykkopycinski patrykkopycinski marked this pull request as ready for review January 27, 2021 10:55
@patrykkopycinski patrykkopycinski requested a review from a team as a code owner January 27, 2021 10:55
@kibanamachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
osquery - 49 +49

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
osquery - 95.7KB +95.7KB

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id before after diff
osquery - 9.8KB +9.8KB
Unknown metric groups

async chunk count

id before after diff
osquery - 1 +1

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

Copy link
Contributor

@spalger spalger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Operations specific changes LGTM, but somethings funky with the CODEOWNERS

.github/CODEOWNERS Show resolved Hide resolved
@patrykkopycinski patrykkopycinski requested review from a team and removed request for a team January 27, 2021 18:26
Copy link
Contributor

@lykkin lykkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎉

@patrykkopycinski patrykkopycinski merged commit d7028e1 into elastic:master Jan 28, 2021
@patrykkopycinski patrykkopycinski deleted the feat/init-osquery branch January 28, 2021 07:25
patrykkopycinski added a commit to patrykkopycinski/kibana that referenced this pull request Jan 28, 2021
jloleysens added a commit to jloleysens/kibana that referenced this pull request Jan 28, 2021
…y-tests

* 'master' of github.com:elastic/kibana: (31 commits)
  [Discover] Add grid flyout jest test (elastic#89088)
  [Search Sessions] Improve session restoration back button (elastic#87635)
  [TSVB] Remove vis_type_timeseries_enhanced plugin (elastic#89274)
  [Security Solution] Init Osquery plugin (elastic#87109)
  [Fleet] Do not defined aliases inside datastream template (elastic#89512)
  skip flaky suite (elastic#86950)
  chore(NA): bazel machinery installation on kbn bootstrap (elastic#89469)
  [build/docker] Add support for centos ARM builds (elastic#84831)
  Convert default_watch.json to a JS object in order to avoid TS complaints (elastic#89488)
  [CI] Decrease number of Jest workers (elastic#89504)
  [Maps] remove maps_oss TS project (elastic#89502)
  Adds migration settings to Docker (elastic#89501)
  [Lens] Fix crash in transition from unique count to last value (elastic#88916)
  [kbn-es] Always use bundled JDK when starting Elasticsearch (elastic#89437)
  unskip getting_started/shakespeare test elasticsearch 64016 (elastic#89346)
  [Maps] migrate maps, maps_file_upload, and maps_legacy_licensing to TS projects (elastic#89439)
  skip flaky suite (elastic#89478)
  skip flaky suite (elastic#89476)
  skip flaky suite (elastic#89477)
  skip flaky suite (elastic#89475)
  ...

# Conflicts:
#	x-pack/plugins/index_lifecycle_management/public/application/sections/edit_policy/components/phases/cold_phase/cold_phase.tsx
jloleysens added a commit to jloleysens/kibana that referenced this pull request Jan 28, 2021
…updates-and-timeline-cleanup

* 'master' of github.com:elastic/kibana: (44 commits)
  [Discover] Add grid flyout jest test (elastic#89088)
  [Search Sessions] Improve session restoration back button (elastic#87635)
  [TSVB] Remove vis_type_timeseries_enhanced plugin (elastic#89274)
  [Security Solution] Init Osquery plugin (elastic#87109)
  [Fleet] Do not defined aliases inside datastream template (elastic#89512)
  skip flaky suite (elastic#86950)
  chore(NA): bazel machinery installation on kbn bootstrap (elastic#89469)
  [build/docker] Add support for centos ARM builds (elastic#84831)
  Convert default_watch.json to a JS object in order to avoid TS complaints (elastic#89488)
  [CI] Decrease number of Jest workers (elastic#89504)
  [Maps] remove maps_oss TS project (elastic#89502)
  Adds migration settings to Docker (elastic#89501)
  [Lens] Fix crash in transition from unique count to last value (elastic#88916)
  [kbn-es] Always use bundled JDK when starting Elasticsearch (elastic#89437)
  unskip getting_started/shakespeare test elasticsearch 64016 (elastic#89346)
  [Maps] migrate maps, maps_file_upload, and maps_legacy_licensing to TS projects (elastic#89439)
  skip flaky suite (elastic#89478)
  skip flaky suite (elastic#89476)
  skip flaky suite (elastic#89477)
  skip flaky suite (elastic#89475)
  ...

# Conflicts:
#	x-pack/plugins/index_lifecycle_management/public/application/sections/edit_policy/components/phases/hot_phase/hot_phase.tsx
#	x-pack/plugins/index_lifecycle_management/public/application/sections/edit_policy/lib/absolute_timing_to_relative_timing.ts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature:Osquery Security Solution Osquery feature release_note:enhancement Team:Asset Management Security Asset Management Team v7.12.0 v8.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants