Siem Readiness initial plugin and navigation, package, server api#233714
Siem Readiness initial plugin and navigation, package, server api#233714JordanSh merged 32 commits intoelastic:mainfrom
Conversation
…nSh/kibana into siem-readiness-kbn-package
|
Pinging @elastic/kibana-cloud-security-posture (Team:Cloud Security) |
PhilippeOberti
left a comment
There was a problem hiding this comment.
LGTM for the @elastic/security-threat-hunting-investigations team. Thank you for keeping this first PR very small and targeted, makes the review a lot nicer on everyone :)
mattkime
left a comment
There was a problem hiding this comment.
Just one question regarding the management code owner review
| export const ENABLE_CLOUD_CONNECTOR_SETTING = 'securitySolution:enableCloudConnector' as const; | ||
|
|
||
| /** This Kibana Advanced Setting allows users to enable/disable the SIEM Readiness Feature */ | ||
| export const ENABLE_SIEM_READINESS_SETTING = 'securitySolution:enableSiemReadiness' as const; |
There was a problem hiding this comment.
should this be imported from the management package?
There was a problem hiding this comment.
let me know if i should move this, i've followed the pattern of other advanced settings from security solution as can be seen in this file
There was a problem hiding this comment.
I'm just curious why its defined in two different places. Its not a huge deal but I am trying to understand before delivering my approval.
There was a problem hiding this comment.
thank you for noticing its being defined twice. indeed the other const in the management package ended up not being used at the end. i will remove it and only leave this one. thank you for catching this
💚 Build Succeeded
Metrics [docs]Module Count
Public APIs missing comments
Async chunks
Page load bundle
Unknown metric groupsAPI count
async chunk count
ESLint disabled line counts
Total ESLint disabled count
History
cc @JordanSh |
Summary
Resolves #230516
Resolves #230533
This PR adds the initial infrastructure for the SIEM Readiness feature.
How to enable
Create a local ESS environment (Advanced Setting flag is hidden in serverless regardless of kibana.dev.yml settings)
Enable the experimental flag in your
kibana.dev.ymlby adding this line:This should allow rendering of the Enable SIEM Readiness Dashboard setting in the Advanced Settings page via
http://localhost:5601/app/management/kibana/settings. After switching on the toggle and reloading, the SIEM Readiness link should be available via the navigation menu and the search bar.