Skip to content

[8.7] [Security Solution][Alerts] fixes merge fields with source in Detection Engine on Alerts creation (#151004)#152449

Merged
vitaliidm merged 1 commit intoelastic:8.7from
vitaliidm:backport/8.7/pr-151004
Mar 1, 2023
Merged

[8.7] [Security Solution][Alerts] fixes merge fields with source in Detection Engine on Alerts creation (#151004)#152449
vitaliidm merged 1 commit intoelastic:8.7from
vitaliidm:backport/8.7/pr-151004

Conversation

@vitaliidm
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 8.7:

Questions ?

Please refer to the Backport tool documentation

…on Engine on Alerts creation (elastic#151004)

## Summary

- fixes elastic#147389
- `mergeMissingFieldsWithSource` and `mergeAllFieldsWithSource` method
will not be merging anymore multi field values into source.

### Checklist

Delete any items that are not applicable to this PR.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios

### For maintainers

- [ ] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Marshall Main <55718608+marshallmain@users.noreply.github.com>
(cherry picked from commit 88be889)

# Conflicts:
#	x-pack/plugins/security_solution/server/lib/detection_engine/signals/source_fields_merging/utils/is_path_valid.test.ts
#	x-pack/plugins/security_solution/server/lib/detection_engine/signals/source_fields_merging/utils/is_path_valid.ts
@vitaliidm vitaliidm added the backport This PR is a backport of another PR label Mar 1, 2023
@vitaliidm vitaliidm enabled auto-merge (squash) March 1, 2023 12:09
@vitaliidm vitaliidm merged commit 932f1b8 into elastic:8.7 Mar 1, 2023
@kibana-ci
Copy link
Copy Markdown

💚 Build Succeeded

Metrics [docs]

✅ unchanged

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@vitaliidm vitaliidm deleted the backport/8.7/pr-151004 branch March 4, 2024 17:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants