Skip to content

[Security Solution] Transfer rule preview tests to Detection Engine (API Integration)#230267

Merged
banderror merged 1 commit intoelastic:mainfrom
banderror:transfer-tests-for-rule-preview
Aug 11, 2025
Merged

[Security Solution] Transfer rule preview tests to Detection Engine (API Integration)#230267
banderror merged 1 commit intoelastic:mainfrom
banderror:transfer-tests-for-rule-preview

Conversation

@banderror
Copy link
Contributor

@banderror banderror commented Aug 1, 2025

Partially addresses: #229688
Addresses: builds/3018

Summary

This PR transfers some API Integration tests for Rule Preview under the ownership of @elastic/security-detection-engine who own this area of features. Tests being transferred:

From:

  • x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts

To:

  • x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts

Flaky test runs

  1. 50x ESS + 50x Serverless 🟢

Checklist

  • Flaky Test Runner was used on any tests changed
  • The PR description includes the appropriate Release Notes section, and the correct release_note:* label is applied per the guidelines
  • Review the backport guidelines and apply applicable backport:* labels.

@banderror banderror self-assigned this Aug 1, 2025
@banderror banderror added test technical debt Improvement of the software architecture and operational architecture release_note:skip Skip the PR/issue when compiling release notes test-api-integration Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Feature:Detection Rule Preview Security Solution Detection Rule Preview feature Team:Detection Rule Management Security Detection Rule Management Team Team:Detection Engine Security Solution Detection Engine Area backport:version Backport to applied version labels v9.2.0 v9.0.5 v9.1.1 v8.18.5 v8.19.1 labels Aug 1, 2025
@kibanamachine
Copy link
Contributor

Flaky Test Runner Stats

🎉 All tests passed! - kibana-flaky-test-suite-runner#8968

[✅] x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/configs/ess_trial_license.config.ts: 50/50 tests passed.
[✅] x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/configs/serverless_complete_tier.config.ts: 50/50 tests passed.

see run history

@banderror banderror marked this pull request as ready for review August 1, 2025 17:47
@banderror banderror requested review from a team as code owners August 1, 2025 17:47
@banderror banderror requested review from dhurley14 and jkelas August 1, 2025 17:47
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-engine (Team:Detection Engine)

@banderror banderror requested review from maximpn and nikitaindik and removed request for jkelas August 1, 2025 17:47
@kibanamachine
Copy link
Contributor

Starting backport for target branches: 8.18, 8.19, 9.0, 9.1

https://github.com/elastic/kibana/actions/runs/16887114778

@kibanamachine
Copy link
Contributor

💔 All backports failed

Status Branch Result
8.18 Backport failed because of merge conflicts
8.19 Backport failed because of merge conflicts
9.0 Backport failed because of merge conflicts
9.1 Backport failed because of merge conflicts

Manual backport

To create the backport manually run:

node scripts/backport --pr 230267

Questions ?

Please refer to the Backport tool documentation

banderror added a commit to banderror/kibana that referenced this pull request Aug 13, 2025
…API Integration) (elastic#230267)

**Partially addresses: elastic#229688
**Addresses:
[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**

## Summary

This PR transfers some API Integration tests for Rule Preview under the
ownership of @elastic/security-detection-engine who own this area of
features. Tests being transferred:

From:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`

To:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`

## Flaky test runs

1. [50x ESS + 50x
Serverless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)
🟢

### Checklist

- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.

(cherry picked from commit a995d8a)

# Conflicts:
#	x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts
banderror added a commit to banderror/kibana that referenced this pull request Aug 13, 2025
…API Integration) (elastic#230267)

**Partially addresses: elastic#229688
**Addresses:
[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**

## Summary

This PR transfers some API Integration tests for Rule Preview under the
ownership of @elastic/security-detection-engine who own this area of
features. Tests being transferred:

From:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`

To:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`

## Flaky test runs

1. [50x ESS + 50x
Serverless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)
🟢

### Checklist

- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.

(cherry picked from commit a995d8a)

# Conflicts:
#	x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts
banderror added a commit to banderror/kibana that referenced this pull request Aug 13, 2025
…API Integration) (elastic#230267)

**Partially addresses: elastic#229688
**Addresses:
[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**

## Summary

This PR transfers some API Integration tests for Rule Preview under the
ownership of @elastic/security-detection-engine who own this area of
features. Tests being transferred:

From:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`

To:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`

## Flaky test runs

1. [50x ESS + 50x
Serverless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)
🟢

### Checklist

- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.

(cherry picked from commit a995d8a)

# Conflicts:
#	x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts
banderror added a commit to banderror/kibana that referenced this pull request Aug 13, 2025
…API Integration) (elastic#230267)

**Partially addresses: elastic#229688
**Addresses:
[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**

## Summary

This PR transfers some API Integration tests for Rule Preview under the
ownership of @elastic/security-detection-engine who own this area of
features. Tests being transferred:

From:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`

To:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`

## Flaky test runs

1. [50x ESS + 50x
Serverless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)
🟢

### Checklist

- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.

(cherry picked from commit a995d8a)

# Conflicts:
#	x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts
@banderror
Copy link
Contributor Author

💚 All backports created successfully

Status Branch Result
9.1
9.0
8.19
8.18

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

@banderror banderror deleted the transfer-tests-for-rule-preview branch August 13, 2025 14:22
banderror added a commit to banderror/kibana that referenced this pull request Aug 13, 2025
…API Integration) (elastic#230267)

**Partially addresses: elastic#229688
**Addresses:
[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**

This PR transfers some API Integration tests for Rule Preview under the
ownership of @elastic/security-detection-engine who own this area of
features. Tests being transferred:

From:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`

To:

-
`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`

1. [50x ESS + 50x
Serverless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)
🟢

- [x] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)
- [x] Review the [backport
guidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)
and apply applicable `backport:*` labels.

(cherry picked from commit a995d8a)
@kibanamachine kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Aug 13, 2025
@kibanamachine
Copy link
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @banderror

banderror added a commit that referenced this pull request Aug 13, 2025
…ngine (API Integration) (#230267) (#231638)

# Backport

This will backport the following commits from `main` to `8.19`:
- [[Security Solution] Transfer rule preview tests to Detection Engine
(API Integration)
(#230267)](#230267)

<!--- Backport version: 10.0.1 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Georgii
Gorbachev","email":"georgii.gorbachev@elastic.co"},"sourceCommit":{"committedDate":"2025-08-11T17:16:22Z","message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","technical
debt","release_note:skip","test-api-integration","Team:Detections and
Resp","Team: SecuritySolution","Feature:Detection Rule
Preview","Team:Detection Rule Management","Team:Detection
Engine","backport:version","v9.2.0","v9.0.5","v8.18.5","v9.1.2","v8.19.2"],"title":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration)","number":230267,"url":"https://github.com/elastic/kibana/pull/230267","mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","9.1","8.19"],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/230267","number":230267,"mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},{"branch":"9.0","label":"v9.0.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
banderror added a commit that referenced this pull request Aug 13, 2025
…gine (API Integration) (#230267) (#231632)

# Backport

This will backport the following commits from `main` to `9.0`:
- [[Security Solution] Transfer rule preview tests to Detection Engine
(API Integration)
(#230267)](#230267)

<!--- Backport version: 10.0.1 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Georgii
Gorbachev","email":"georgii.gorbachev@elastic.co"},"sourceCommit":{"committedDate":"2025-08-11T17:16:22Z","message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","technical
debt","release_note:skip","test-api-integration","Team:Detections and
Resp","Team: SecuritySolution","Feature:Detection Rule
Preview","Team:Detection Rule Management","Team:Detection
Engine","backport:version","v9.2.0","v9.0.5","v8.18.5","v9.1.2","v8.19.2"],"title":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration)","number":230267,"url":"https://github.com/elastic/kibana/pull/230267","mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","9.1","8.19"],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/230267","number":230267,"mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},{"branch":"9.0","label":"v9.0.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
banderror added a commit that referenced this pull request Aug 13, 2025
…ngine (API Integration) (#230267) (#231640)

# Backport

This will backport the following commits from `main` to `8.18`:
- [[Security Solution] Transfer rule preview tests to Detection Engine
(API Integration)
(#230267)](#230267)

<!--- Backport version: 10.0.1 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Georgii
Gorbachev","email":"georgii.gorbachev@elastic.co"},"sourceCommit":{"committedDate":"2025-08-11T17:16:22Z","message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","technical
debt","release_note:skip","test-api-integration","Team:Detections and
Resp","Team: SecuritySolution","Feature:Detection Rule
Preview","Team:Detection Rule Management","Team:Detection
Engine","backport:version","v9.2.0","v9.0.5","v8.18.5","v9.1.2","v8.19.2"],"title":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration)","number":230267,"url":"https://github.com/elastic/kibana/pull/230267","mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","9.1","8.19"],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/230267","number":230267,"mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},{"branch":"9.0","label":"v9.0.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
banderror added a commit that referenced this pull request Aug 13, 2025
…gine (API Integration) (#230267) (#231631)

# Backport

This will backport the following commits from `main` to `9.1`:
- [[Security Solution] Transfer rule preview tests to Detection Engine
(API Integration)
(#230267)](#230267)

<!--- Backport version: 10.0.1 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Georgii
Gorbachev","email":"georgii.gorbachev@elastic.co"},"sourceCommit":{"committedDate":"2025-08-11T17:16:22Z","message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["test","technical
debt","release_note:skip","test-api-integration","Team:Detections and
Resp","Team: SecuritySolution","Feature:Detection Rule
Preview","Team:Detection Rule Management","Team:Detection
Engine","backport:version","v9.2.0","v9.0.5","v8.18.5","v9.1.2","v8.19.2"],"title":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration)","number":230267,"url":"https://github.com/elastic/kibana/pull/230267","mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","9.1","8.19"],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/230267","number":230267,"mergeCommit":{"message":"[Security
Solution] Transfer rule preview tests to Detection Engine (API
Integration) (#230267)\n\n**Partially addresses:
https://github.com/elastic/kibana/issues/229688**\n**Addresses:\n[builds/3018](https://buildkite.com/elastic/kibana-serverless-security-solution-quality-gate-rule-management/builds/3018)**\n\n##
Summary\n\nThis PR transfers some API Integration tests for Rule Preview
under the\nownership of @elastic/security-detection-engine who own this
area of\nfeatures. Tests being
transferred:\n\nFrom:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_creation/trial_license_complete_tier/preview_rules.ts`\n\nTo:\n\n-\n`x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_preview/preview_rules.ts`\n\n##
Flaky test runs\n\n1. [50x ESS +
50x\nServerless](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/8968)\n🟢\n\n###
Checklist\n\n- [x] [Flaky
Test\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\nused on any tests changed\n- [x] The PR description includes the
appropriate Release Notes section,\nand the correct `release_note:*`
label is applied per
the\n[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)\n-
[x] Review the
[backport\nguidelines](https://docs.google.com/document/d/1VyN5k91e5OVumlc0Gb9RPa3h1ewuPE705nRtioPiTvY/edit?usp=sharing)\nand
apply applicable `backport:*`
labels.","sha":"a995d8a3718f057b21852fd72a72b68a724b13d6"}},{"branch":"9.0","label":"v9.0.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.5","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
@kibanamachine kibanamachine added v9.1.3 and removed backport missing Added to PRs automatically when the are determined to be missing a backport. labels Aug 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:version Backport to applied version labels Feature:Detection Rule Preview Security Solution Detection Rule Preview feature release_note:skip Skip the PR/issue when compiling release notes Team:Detection Engine Security Solution Detection Engine Area Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. technical debt Improvement of the software architecture and operational architecture test test-api-integration v8.18.6 v8.19.3 v9.0.6 v9.1.3 v9.2.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants