[7.x] New events resolver (#82170) (#83443)

* New events resolver (#82170)

* Added Test for event.library

* renamed data directry and gzip data file

* rename expectedData file

* Changes per Charlie request

* Changes for the enable_APM-ci branch

* Update resolver.ts

* Added comment per Charlie request

* Update resolver.ts

* Added Alert Test for Resolver and fix for the APM enabled Run fail

* Added Alert Test for Resolver and fix for the APM enabled Run fail

* removed commented out code

* Fixing CI fail

* Fixing CI fail

* Removed Alert Resolver test

* aAdding Alert test back

* Adding Alert test back

* Adding Alert test back

* Adding info log for debuging

* Adding info log for debuging

* Adding info log for debuging

* Adding info log for debuging

* Adding info log for debuging

* Adding info log for debuging

* adding one more verification for Data

* stripedd Data file

Co-authored-by: Kibana Machine <[email protected]>

* Update hosts_page.ts

* Update resolver.ts

* Update resolver.ts

* Update hosts_page.ts

* Update resolver.ts

Co-authored-by: Kibana Machine <[email protected]>

Author: IgorGuz2000

x-pack/test/functional/es_archives/endpoint/resolver_tree/alert_events/data.json.gz

@@ -269,6 +269,29 @@ export default function ({ getPageObjects, getService }: FtrProviderContext) {
         );
         await pageObjects.hosts.runNodeEvents(expectedLibraryData);
       });
+
+      it('Check Related Events for event.alert Node', async () => {
+        await esArchiver.load('empty_kibana');
+        await esArchiver.load('endpoint/resolver_tree/alert_events', { useCreate: true });
+        await queryBar.setQuery('');
+        await queryBar.submitQuery();
+        const expectedAlertData = [
+          '1 library',
+          '157 file',
+          '520 registry',
+          '3 file',
+          '5 library',
+          '5 library',
+        ];
+        await pageObjects.hosts.navigateToEventsPanel();
+        await pageObjects.hosts.executeQueryAndOpenResolver('event.dataset : endpoint.alerts');
+        await (await testSubjects.find('resolver:graph-controls:zoom-out')).click();
+        await browser.setWindowSize(2100, 1500);
+        for (let i = 0; i < 3; i++) {
+          await (await testSubjects.find('resolver:graph-controls:east-button')).click();
+        }
+        await pageObjects.hosts.runNodeEvents(expectedAlertData);
+      });
     });
   });
 }

x-pack/test/security_solution_endpoint/apps/endpoint/resolver.ts

@@ -30,7 +30,6 @@ export default async function ({ readConfigFile }: FtrConfigProviderContext) {
       ['securitySolutionManagement']: {
         pathname: '/app/security/administration',
       },
-      ...xpackFunctionalConfig.get('apps'),
       ['security']: {
         pathname: '/app/security',
       },

x-pack/test/security_solution_endpoint/config.ts

@@ -121,6 +121,8 @@ export function SecurityHostsPageProvider({ getService, getPageObjects }: FtrPro
       for (let i = 0; i < NodeSubmenuItems.length; i++) {
         await (await testSubjects.findAll('resolver:map:node-submenu-item'))[i].click();
         const Events = await testSubjects.findAll('resolver:map:node-submenu-item');
+        // this sleep is for the AMP enabled run
+        await pageObjects.common.sleep(300);
         const EventName = await Events[i]._webElement.getText();
         const LinkText = await testSubjects.find('resolver:breadcrumbs:last');
         const linkText = await LinkText._webElement.getText();