-
Notifications
You must be signed in to change notification settings - Fork 180
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Disable unmapped fields filter #4929
Disable unmapped fields filter #4929
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
review
LGTM
7d7cb43
to
2b8bb3a
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
…thub.com/wazuh/wazuh-kibana-app into fix/disable-unmapped-fields-filters-4429
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CR: ✔️
Test: ✔️
Description
Team,
this PR disables filter buttons of unmapped fields in the Security Events table.
Prevents filtering errors when clicking unmapped fields filters:
Issues Resolved
Closes #4932
Related issue #4429
Evidence
Test
Example alert
If you are using a Wazuh manager with Filebeat you can append this alert to the
alerts.json
file and this will send it to Elasticsearch.Scenario 1: Unindexed fields can't be filtered
Given: environment with unknown fields in the index pattern
When: the user goes to the
Events
tab from a moduleAnd the user explores the details of an alert seeing the unindexed field
Then the user can't set the filters using the magnifier glass icon
Scenario 2: Indexed fields can be filtered
Given: environment with unknown fields in the index pattern
When: the user goes to the
Events
tab from a moduleAnd the user explores the details of an alert seeing the indexed field
Then the user can set the filters using the magnifier glass icon
Scenario 3: No filtrabe fields can't be filtered
Given: environment with unknown fields in the index pattern
When: the user goes to the
Events
tab from a moduleAnd the user explores the details of an alert seeing the unindexed field
Then the user can't set the filters using the magnifier glass icon
Scenario 4: Unindexed fields can't be filtered
Given: environment with unknown fields in the index pattern
When: the user goes to the
Dashboard
tab fromSecurity events
moduleAnd the user explores the details of an alert in the Alerts Table seeing the unindexed field
Then the user can't set the filters using the magnifier glass icon
Scenario 5: Indexed fields can be filtered
Given: environment with unknown fields in the index pattern
When: the user goes to the
Dashboard
tab fromSecurity events
moduleAnd the user explores the details of an alert in the Alerts Table seeing the indexed field
Then the user can set the filters using the magnifier glass icon
Scenario 6: No filtrabe fields can't be filtered
Given: environment with unknown fields in the index pattern
When: the user goes to the
Dashboard
tab fromSecurity events
moduleAnd the user explores the details of an alert in the Alerts Table seeing the unindexed field
Then the user can't set the filters using the magnifier glass icon
Check List
yarn test:jest