New events resolver

x-pack/test/security_solution_endpoint/apps/endpoint/resolver.ts

@@ -279,6 +279,29 @@ export default function ({ getPageObjects, getService }: FtrProviderContext) {
         }
         await pageObjects.hosts.runNodeEvents(expectedLibraryData);
       });
+
+      it('Check Related Events for event.alert Node', async () => {
+        await esArchiver.load('empty_kibana');
+        await esArchiver.load('endpoint/resolver_tree/alert_events', { useCreate: true });
+        await queryBar.setQuery('');
+        await queryBar.submitQuery();
+        const expectedAlertData = [
+          '1 library',
+          '157 file',
+          '520 registry',
+          '3 file',
+          '5 library',
+          '5 library',
+        ];
+        await pageObjects.hosts.navigateToEventsPanel();
+        await pageObjects.hosts.executeQueryAndOpenResolver('event.dataset : endpoint.alerts');
+        await (await testSubjects.find('resolver:graph-controls:zoom-out')).click();
+        await browser.setWindowSize(2100, 1500);
+        for (let i = 0; i < 2; i++) {
+          await (await testSubjects.find('resolver:graph-controls:east-button')).click();
+        }
+        await pageObjects.hosts.runNodeEvents(expectedAlertData);
+      });
     });
   });
 }

x-pack/test/security_solution_endpoint/config.ts

@@ -30,7 +30,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
       ['securitySolutionManagement']: {
         pathname: '/app/security/administration',
       },
-      ...xpackFunctionalConfig.get('apps'),
       ['security']: {
         pathname: '/app/security',
       },

x-pack/test/security_solution_endpoint/page_objects/hosts_page.ts

@@ -121,6 +121,8 @@ export function SecurityHostsPageProvider({ getService, getPageObjects }: FtrPro
       for (let i = 0; i < NodeSubmenuItems.length; i++) {
         await (await testSubjects.findAll('resolver:map:node-submenu-item'))[i].click();
         const Events = await testSubjects.findAll('resolver:map:node-submenu-item');
+        // this sleep is for the AMP enabled run
+        await pageObjects.common.sleep(300);
         const EventName = await Events[i]._webElement.getText();
         const LinkText = await testSubjects.find('resolver:breadcrumbs:last');
         const linkText = await LinkText._webElement.getText();