updated new code since merge with master to use exceptions_list`

elastic · Apr 17, 2020 · 7724235 · 7724235
1 parent 76d3f26
commit 7724235
Show file tree

Hide file tree

Showing 10 changed files with 12 additions and 12 deletions.
diff --git a/.../plugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_and.json b/.../plugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_and.json
@@ -8,7 +8,7 @@
   "query": "host.name: *",
   "interval": "30s",
   "language": "kuery",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.module",
       "values_operator": "excluded",

diff --git a/...ins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_excluded.json b/...ins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_excluded.json
@@ -8,7 +8,7 @@
   "query": "host.name: *",
   "interval": "30s",
   "language": "kuery",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.module",
       "values_operator": "excluded",

diff --git a/...ugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_exists.json b/...ugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_exists.json
@@ -8,7 +8,7 @@
   "query": "host.name: *",
   "interval": "30s",
   "language": "kuery",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.action",
       "values_operator": "included",

diff --git a/...plugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_list.json b/...plugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_list.json
@@ -8,7 +8,7 @@
   "query": "host.name: *",
   "interval": "30s",
   "language": "kuery",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.module",
       "values_operator": "excluded",

diff --git a/...lugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_match.json b/...lugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_match.json
@@ -8,7 +8,7 @@
   "query": "host.name: *",
   "interval": "30s",
   "language": "kuery",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.module",
       "values_operator": "included",

diff --git a/...ns/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_match_all.json b/...ns/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_match_all.json
@@ -8,7 +8,7 @@
   "query": "host.name: *",
   "interval": "30s",
   "language": "kuery",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.module",
       "values_operator": "included",

diff --git a/...y/plugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_or.json b/...y/plugins/siem/server/lib/detection_engine/scripts/rules/queries/lists/query_with_or.json
@@ -7,7 +7,7 @@
   "type": "query",
   "query": "host.name: *",
   "interval": "30s",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "event.module",
       "values_operator": "excluded",

diff --git a/x-pack/legacy/plugins/siem/server/lib/detection_engine/signals/build_exceptions_query.ts b/x-pack/legacy/plugins/siem/server/lib/detection_engine/signals/build_exceptions_query.ts
@@ -185,7 +185,7 @@ export const buildQueryExceptions = ({
 }: {
   query: string;
   language: Language;
-  lists: RuleAlertParams['lists'];
+  lists: RuleAlertParams['exceptions_list'];
 }): Query[] => {
   if (lists && lists !== null) {
     const exceptions = buildExceptions({ lists, language, query });

diff --git a/x-pack/legacy/plugins/siem/server/lib/detection_engine/signals/get_filter.ts b/x-pack/legacy/plugins/siem/server/lib/detection_engine/signals/get_filter.ts
@@ -22,7 +22,7 @@ export const getQueryFilter = (
   language: Language,
   filters: PartialFilter[],
   index: string[],
-  lists: RuleAlertParams['lists']
+  lists: RuleAlertParams['exceptions_list']
 ) => {
   const indexPattern = {
     fields: [],
@@ -53,7 +53,7 @@ interface GetFilterArgs {
   savedId: string | undefined | null;
   services: AlertServices;
   index: string[] | undefined | null;
-  lists: RuleAlertParams['lists'];
+  lists: RuleAlertParams['exceptions_list'];
 }
 
 interface QueryAttributes {

diff --git a/x-pack/legacy/plugins/siem/server/lib/detection_engine/signals/signal_rule_alert_type.ts b/x-pack/legacy/plugins/siem/server/lib/detection_engine/signals/signal_rule_alert_type.ts
@@ -66,7 +66,7 @@ export const signalRulesAlertType = ({
         query,
         to,
         type,
-        lists,
+        exceptions_list,
       } = params;
       const searchAfterSize = Math.min(maxSignals, DEFAULT_SEARCH_AFTER_PAGE_SIZE);
       let hasError: boolean = false;
@@ -201,7 +201,7 @@ export const signalRulesAlertType = ({
             savedId,
             services,
             index: inputIndex,
-            lists,
+            lists: exceptions_list,
           });
 
           const noReIndex = buildEventsSearchQuery({