[ResponseOps] [Cases] Update mapping for case title

[adcoelho]

Connected to #132041

Summary

This is the first in a series of PRs with migrations of the Cases' Saved objects to enable sorting by additional fields in the all-cases view.

In this PR the case title becomes a multi-field with an additional keyword field for sorting.

Added a small integration test to confirm sorting by title works.

[elasticmachine]

Pinging @elastic/response-ops-cases (Feature:Cases)

[afharo]

Core changes LGTM

[cnasikas]

Great job! I tested and working as expected. I left some comments.

[cnasikas]

Do you mind if you rename the function form sortToSnake to getSortField or similar? The function does not convert from camel case to snake case any more.

[cnasikas]

We should remove it (my mistake, I know 🙂 ) in case it will cause a migration if we change it. The backend validation is enough. @rudolf if we change the ignore_above in the future will it trigger a migration (reindex)?

[adcoelho]

Do you mean having the default value for this field?

[cnasikas]

I mean remove the ignore_above: 160 entirely.

[rudolf]

I think we would always reindex if any key was removed from the mappings (like removing the ignore_above) or if updating the mappings of the existing index fails.

[cnasikas]

Thanks, @rudolf! What I meant is if we changing the ignore_above value from 160 to 200 will trigger a migration? I am just curious 🙂. We will not add it (never had it before this PR) so we do not have this dilemma in the future.

[kibana-ci]

💚 Build Succeeded

• Buildkite Build
• Commit: 242910f

Metrics [docs]

Saved Objects .kibana field count

Every field in each saved object type adds overhead to Elasticsearch. Kibana needs to keep the total field count below Elasticsearch's default limit of 1000 fields. Only specify field mappings for the fields you wish to search on or query. See https://www.elastic.co/guide/en/kibana/master/saved-objects-service.html#_mappings

id	before	after	diff
cases	47	48	+1

Unknown metric groups

ESLint disabled in files

id	before	after	diff
osquery	1	2	+1

ESLint disabled line counts

id	before	after	diff
enterpriseSearch	19	21	+2
fleet	60	66	+6
osquery	109	115	+6
securitySolution	445	451	+6
total			+20

Total ESLint disabled count

id	before	after	diff
enterpriseSearch	20	22	+2
fleet	69	75	+6
osquery	110	117	+7
securitySolution	521	527	+6
total			+21

History

• 💔 Build #94107 failed ce93e3e
• 💛 Build #93996 was flaky 5bda09e
• 💔 Build #93972 failed fa9f090

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream