[8.18] [DOCS] Update CrowdStrike and SentinelOne connectors (#219887)

docs/management/connectors/action-types/crowdstrike.asciidoc

@@ -8,8 +8,6 @@
 :frontmatter-tags-content-type: [how-to] 
 :frontmatter-tags-user-goals: [configure]
 
-preview::[]
-
 The CrowdStrike connector communicates with CrowdStrike Management Console via REST API.
 
 To use this connector, you must have authority to run {endpoint-sec} connectors, which is an *{connectors-feature}* sub-feature privilege. Refer to <<kibana-privileges>>.
@@ -22,7 +20,6 @@ You can create connectors in *{stack-manage-app} > {connectors-ui}*. For example
 
 [role="screenshot"]
 image::management/connectors/images/crowdstrike-connector.png[CrowdStrike connector]
-// NOTE: This is an autogenerated screenshot. Do not edit it directly.
 
 [float]
 [[crowdstrike-connector-configuration]]
@@ -38,4 +35,11 @@ Client secret::  The CrowdStrike API client secret to authenticate the client ID
 [[crowdstrike-action-parameters]]
 === Test connectors
 
-At this time, you cannot test the CrowdStrike connector.
+You can test connectors as you're creating or editing the connector in {kib}. For example:
+
+[role="screenshot"]
+image::management/connectors/images/crowdstrike-connector-test.png[CrowdStrike connector test]
+
+The CrowdStrike action has the following configuration properties:
+
+Agent IDs:: Get details about one or more CrowdStrike agent IDs.

docs/management/connectors/action-types/sentinelone.asciidoc

@@ -8,8 +8,6 @@
 :frontmatter-tags-content-type: [how-to] 
 :frontmatter-tags-user-goals: [configure]
 
-preview::[]
-
 The SentinelOne connector communicates with SentinelOne Management Console via REST API.
 
 To use this connector, you must have authority to run {endpoint-sec} connectors, which is an *{connectors-feature}* sub-feature privilege. Refer to <<kibana-privileges>>.
@@ -22,7 +20,6 @@ You can create connectors in *{stack-manage-app} > {connectors-ui}*. For example
 
 [role="screenshot"]
 image::management/connectors/images/sentinelone-connector.png[SentinelOne connector]
-// NOTE: This is an autogenerated screenshot. Do not edit it directly.
 
 [float]
 [[sentinelone-connector-configuration]]
@@ -38,4 +35,8 @@ URL:: The SentinelOne tenant URL. If you are using the <<action-settings,`xpack.
 [[sentinelone-action-parameters]]
 === Test connectors
 
-At this time, you cannot test the SentinelOne connector.
+You can test connectors as you're creating or editing the connector in {kib}.
+For example:
+
+[role="screenshot"]
+image::management/connectors/images/sentinelone-connector-test.png[SentinelOne connector test]

oas_docs/output/kibana.serverless.yaml

@@ -614,6 +614,8 @@ paths:
                     - $ref: '#/components/schemas/run_closeincident'
                     - $ref: '#/components/schemas/run_createalert'
                     - $ref: '#/components/schemas/run_fieldsbyissuetype'
+                    - $ref: '#/components/schemas/run_getagentdetails'
+                    - $ref: '#/components/schemas/run_getagents'
                     - $ref: '#/components/schemas/run_getchoices'
                     - $ref: '#/components/schemas/run_getfields'
                     - $ref: '#/components/schemas/run_getincident'
@@ -62047,6 +62049,42 @@ components:
               type: string
               description: The Jira issue type identifier.
               example: 10024
+    run_getagentdetails:
+      title: The getAgentDetails subaction
+      type: object
+      required:
+        - subAction
+        - subActionParams
+      description: The `getAgentDetails` subaction for CrowdStrike connectors.
+      properties:
+        subAction:
+          type: string
+          description: The action to test.
+          enum:
+            - getAgentDetails
+        subActionParams:
+          type: object
+          description: The set of configuration properties for the action.
+          required:
+            - ids
+          properties:
+            ids:
+              type: array
+              description: An array of CrowdStrike agent identifiers.
+              items:
+                type: string
+    run_getagents:
+      title: The getAgents subaction
+      type: object
+      required:
+        - subAction
+      description: The `getAgents` subaction for SentinelOne connectors.
+      properties:
+        subAction:
+          type: string
+          description: The action to test.
+          enum:
+            - getAgents
     run_getchoices:
       title: The getChoices subaction
       type: object

oas_docs/output/kibana.yaml

@@ -985,6 +985,8 @@ paths:
                     - $ref: '#/components/schemas/run_closeincident'
                     - $ref: '#/components/schemas/run_createalert'
                     - $ref: '#/components/schemas/run_fieldsbyissuetype'
+                    - $ref: '#/components/schemas/run_getagentdetails'
+                    - $ref: '#/components/schemas/run_getagents'
                     - $ref: '#/components/schemas/run_getchoices'
                     - $ref: '#/components/schemas/run_getfields'
                     - $ref: '#/components/schemas/run_getincident'
@@ -51144,6 +51146,42 @@ components:
               type: string
               description: The Jira issue type identifier.
               example: 10024
+    run_getagentdetails:
+      title: The getAgentDetails subaction
+      type: object
+      required:
+        - subAction
+        - subActionParams
+      description: The `getAgentDetails` subaction for CrowdStrike connectors.
+      properties:
+        subAction:
+          type: string
+          description: The action to test.
+          enum:
+            - getAgentDetails
+        subActionParams:
+          type: object
+          description: The set of configuration properties for the action.
+          required:
+            - ids
+          properties:
+            ids:
+              type: array
+              description: An array of CrowdStrike agent identifiers.
+              items:
+                type: string
+    run_getagents:
+      title: The getAgents subaction
+      type: object
+      required:
+        - subAction
+      description: The `getAgents` subaction for SentinelOne connectors.
+      properties:
+        subAction:
+          type: string
+          description: The action to test.
+          enum:
+            - getAgents
     run_getchoices:
       title: The getChoices subaction
       type: object

oas_docs/overlays/connectors.overlays.yaml

@@ -388,6 +388,8 @@ actions:
                     - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_closeincident.yaml'
                     - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_createalert.yaml'
                     - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_fieldsbyissuetype.yaml'
+                    - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getagentdetails.yaml'
+                    - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getagents.yaml'
                     - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getchoices.yaml'
                     - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getfields.yaml'
                     - $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getincident.yaml'

x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getagentdetails.yaml

@@ -0,0 +1,23 @@
+title: The getAgentDetails subaction
+type: object
+required:
+  - subAction
+  - subActionParams
+description: The `getAgentDetails` subaction for CrowdStrike connectors.
+properties:
+  subAction:
+    type: string
+    description: The action to test.
+    enum:
+      - getAgentDetails
+  subActionParams:
+    type: object
+    description: The set of configuration properties for the action.
+    required:
+      - ids
+    properties:
+      ids:
+        type: array
+        description: An array of CrowdStrike agent identifiers.
+        items:
+          type: string

x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getagents.yaml

@@ -0,0 +1,11 @@
+title: The getAgents subaction
+type: object
+required:
+  - subAction
+description: The `getAgents` subaction for SentinelOne connectors.
+properties:
+  subAction:
+    type: string
+    description: The action to test.
+    enum:
+      - getAgents