Skip to content

[8.18] [Security Solution] Add new fields to indices metadata (#219246)#219504

Merged
szaffarano merged 4 commits intoelastic:8.18from
szaffarano:backport/8.18/pr-219246
Apr 29, 2025
Merged

[8.18] [Security Solution] Add new fields to indices metadata (#219246)#219504
szaffarano merged 4 commits intoelastic:8.18from
szaffarano:backport/8.18/pr-219246

Conversation

@szaffarano
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 8.18:

Questions ?

Please refer to the Backport tool documentation

## Summary

Adds `_source.mode` and `index.mode` fields to the
[TELEMETRY_INDEX_SETTINGS_EVENT](https://github.com/elastic/kibana/blob/szaffarano/update-indices-metadata/x-pack/solutions/security/plugins/security_solution/server/lib/telemetry/event_based/events.ts#L470C14-L470C44)
EBT event:

```typescript
export interface IndexSettings {
  index_name: string;
  index_mode?: string;
  default_pipeline?: string;
  final_pipeline?: string;
  source_mode?: string;
}
```
References:
- elastic#194004 Initial version for the
updated EBT event.
- elastic#213822 This is a Similar PR
updating the feature.

The goal is to enhance the index settings EBT event with two new fields
to enrich the telemetry information we collect about the indices used by
the security integrations.

### Checklist

Check the PR satisfies following conditions.

Reviewers should verify this PR satisfies this list as well.

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
(cherry picked from commit 8c596d3)

# Conflicts:
#	x-pack/test/common/utils/security_solution/detections_response/tasks/indices_metadata.ts
@szaffarano szaffarano added the backport This PR is a backport of another PR label Apr 29, 2025
@szaffarano szaffarano enabled auto-merge (squash) April 29, 2025 08:59
@szaffarano
Copy link
Copy Markdown
Contributor Author

@elasticmachine merge upstream

Copy link
Copy Markdown
Contributor

@dejadavi-el dejadavi-el left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ LGTM 👍🏽

@szaffarano
Copy link
Copy Markdown
Contributor Author

@elasticmachine merge upstream

@szaffarano szaffarano merged commit ddef87b into elastic:8.18 Apr 29, 2025
8 checks passed
@elasticmachine
Copy link
Copy Markdown
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

✅ unchanged

History

@szaffarano szaffarano deleted the backport/8.18/pr-219246 branch December 8, 2025 12:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants