Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Test elastic-package#1490 - DO NOT MERGE #8109

Closed
wants to merge 2 commits into from
Closed

Test elastic-package#1490 - DO NOT MERGE #8109

wants to merge 2 commits into from

Conversation

elasticmachine
Copy link

Update elastic-package reference to elastic/elastic-package@930ca03.
Automated by Buildkite build

Relates: elastic/elastic-package#1490

@elasticmachine elasticmachine mentioned this pull request Oct 5, 2023
Merged
@jsoriano jsoriano closed this Oct 6, 2023
@jsoriano jsoriano deleted the test-elastic-package-pr-1490 branch October 6, 2023 10:18
@elasticmachine
Copy link
Author

💔 Tests Failed

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2023-10-06T09:54:00.253+0000

  • Duration: 95 min 24 sec

Test stats 🧪

Test Results
Failed 110
Passed 3222
Skipped 6
Total 3338

Test errors 110

Expand to view the tests failures

> Show only the first 10 test failures

Check integrations / carbon_black_cloud / carbon_black_cloud: check / pipeline test: test-alert.log – carbon_black_cloud.alert
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results

Check integrations / carbon_black_cloud / carbon_black_cloud: check / pipeline test: test-endpoint-event.log – carbon_black_cloud.endpoint_event
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results

Check integrations / carbon_black_cloud / carbon_black_cloud: check / pipeline test: test-watchlist-hit.log – carbon_black_cloud.watchlist_hit
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results
[1] parsing field value failed: [0] field "carbon_black_cloud.watchlist_hit.process.publisher.name" is undefined
[1] field "carbon_black_cloud.watchlist_hit.process.publisher.state" is undefined
[2] array of objects not used as nested type can lead to unexpected results
[2] parsing field value failed: [0] field "carbon_black_cloud.watchlist_hit.process.publisher.state" is undefined
[1] array of objects not used as nested type can lead to unexpected results

Check integrations / tenable_io / tenable_io: check / pipeline test: test-plugin.log – tenable_io.plugin
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results

Check integrations / tenable_io / tenable_io: check / pipeline test: test-asset.log – tenable_io.asset
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results

Check integrations / darktrace / darktrace: check / pipeline test: test-ai-analyst-alert.log – darktrace.ai_analyst_alert
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results

Check integrations / darktrace / darktrace: check / pipeline test: test-model-breach-alert.log – darktrace.model_breach_alert
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results
[1] parsing field value failed: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results
[1] array of objects not used as nested type can lead to unexpected results
[2] parsing field value failed: [0] parsing field value failed: [0] parsing field value failed: field "darktrace.model_breach_alert.triggered_components.triggered_filters.arguments.value" value "60" (float64): expected string or array of strings
[1] array of objects not used as nested type can lead to unexpected results
[1] array of objects not used as nested type can lead to unexpected results

Check integrations / ping_one / ping_one: check / pipeline test: test-pipeline-audit.log – ping_one.audit
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results

Check integrations / microsoft_defender_cloud / microsoft_defender_cloud: check / pipeline test: test-alert.log – microsoft_defender_cloud.event
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results
[1] parsing field value failed: [0] parsing field value failed: [0] array of objects not used as nested type can lead to unexpected results
[1] array of objects not used as nested type can lead to unexpected results

Check integrations / tanium / tanium: check / pipeline test: test-threat-response.log – tanium.threat_response
    Expand to view the error details

     null

    Expand to view the stacktrace

     test case failed: one or more problems with fields found in documents: [0] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[1] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[3] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[4] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[1] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[1] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[3] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[4] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[2] parsing field value failed: [0] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[1] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[4] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[3] parsing field value failed: [0] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[1] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[4] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[4] parsing field value failed: [0] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[1] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[4] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[5] parsing field value failed: [0] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[1] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[4] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[6] parsing field value failed: [0] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[1] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[4] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[7] parsing field value failed: [0] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[1] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined
[4] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[8] parsing field value failed: [0] parsing field value failed: [0] parsing field value failed: field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.intel_intra_ids.id" value "8.50394582e+08" (float64): expected string or array of strings
[1] parsing field value failed: [0] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.relevant_actions.target.instance_hash" is undefined
[2] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.user.group_id" is undefined
[3] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.tanium_unique_id" is undefined
[4] field "tanium.threat_response.other_parameters.log_details.payload_decoded.finding.whats.artifact_activity.acting_artifact.process.parent.process.parent.process.start_time" is undefined

Steps errors 119

Expand to view the steps failures

Show only the first 10 steps failures

Test integration: trellix_edr_cloud
  • Took 0 min 4 sec . View more details here
  • Description: eval "$(../../build/elastic-package stack shellinit)" ../../build/elastic-package test -v --report-format xUnit --report-output file --test-coverage
Test integration: trend_micro_vision_one
  • Took 2 min 48 sec . View more details here
  • Description: eval "$(../../build/elastic-package stack shellinit)" ../../build/elastic-package test -v --report-format xUnit --report-output file --test-coverage
Test integration: vectra_detect
  • Took 0 min 11 sec . View more details here
  • Description: eval "$(../../build/elastic-package stack shellinit)" ../../build/elastic-package test -v --report-format xUnit --report-output file --test-coverage
Check integration: zeek
  • Took 0 min 27 sec . View more details here
  • Description: ../../build/elastic-package check -v
Take down the Elastic stack
  • Took 2 min 34 sec . View more details here
  • Description: build/elastic-package stack down -v
Test integration: zerofox
  • Took 0 min 1 sec . View more details here
  • Description: eval "$(../../build/elastic-package stack shellinit)" ../../build/elastic-package test -v --report-format xUnit --report-output file --test-coverage
Check integration: zeronetworks
  • Took 0 min 4 sec . View more details here
  • Description: ../../build/elastic-package check -v
Take down the Elastic stack
  • Took 1 min 31 sec . View more details here
  • Description: build/elastic-package stack down -v
Test integration: zoom
  • Took 2 min 32 sec . View more details here
  • Description: eval "$(../../build/elastic-package stack shellinit)" ../../build/elastic-package test -v --report-format xUnit --report-output file --test-coverage
Google Storage Download
  • Took 0 min 0 sec . View more details here

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

@elasticmachine
Copy link
Author

🌐 Coverage report

Name Metrics % (covered/total) Diff
Packages 100.0% (258/258) 💚
Files 91.152% (443/486) 👎 -8.848
Classes 91.152% (443/486) 👎 -8.848
Methods 89.168% (4338/4865) 👎 -6.485
Lines 83.78% (82562/98546) 👎 -11.446
Conditionals 100.0% (0/0) 💚

@jsoriano jsoriano mentioned this pull request Oct 6, 2023
Merged
4 tasks
jsoriano added a commit that referenced this pull request Oct 12, 2023
@jsoriano @marc-gr @mrodm
Update elastic-package to use Package Spec 3.0.0-rc1 and fix v3 packa…
06dd24f 
…ges (#8115)

Fix field definitions in packages that were updated before v3 GA release, and are failing now
with the first RC (see #8109, #8120)

Changes applied:
- Fix mapping of ECS fields that are only "objects", by setting
  type: group. They don't generate any mapping, and they are detected
  as invalid objects without object_type.
- Child mappings are imported too. Some examples of these object fields are
  dns.answer or network.inner.
- Objects without object_type that seem to fit as "tags" or "labels" use cases
  have been converted to flattened.
- Objects without object_type that seem to fit as metrics have been converted to type: double.
- Quote field names in test configuration files.
- Validations skipped for references founds in dashboards.
- Validations skipped for the required Kibana version needed for saved tags.

Packages with changes in fields include new changelog entry, so a new package will be released.
---------

Co-authored-by: Marc Guasch <marc.guasch@elastic.co>
Co-authored-by: Mario Rodriguez Molins <mario.rodriguez@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@jsoriano jsoriano

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@elasticmachine @jsoriano