"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.telemetryIndexPattern = exports.policyIndexPattern = exports.metadataTransformPrefix = exports.metadataIndexPattern = exports.metadataCurrentIndexPattern = exports.failedFleetActionErrorCode = exports.eventsIndexPattern = exports.alertsIndexPattern = exports.UPLOAD_ROUTE = exports.UNISOLATE_HOST_ROUTE_V2 = exports.UNISOLATE_HOST_ROUTE = exports.SUSPEND_PROCESS_ROUTE = exports.SUGGESTIONS_ROUTE = exports.POLICY_RESPONSE_INDEX = exports.METADATA_UNITED_TRANSFORM = exports.METADATA_UNITED_INDEX = exports.METADATA_TRANSFORMS_STATUS_ROUTE = exports.METADATA_TRANSFORMS_PATTERN = exports.METADATA_DATASTREAM = exports.KILL_PROCESS_ROUTE = exports.ISOLATE_HOST_ROUTE_V2 = exports.ISOLATE_HOST_ROUTE = exports.HOST_METADATA_LIST_ROUTE = exports.HOST_METADATA_GET_ROUTE = exports.GET_PROCESSES_ROUTE = exports.GET_FILE_ROUTE = exports.FILE_STORAGE_METADATA_INDEX = exports.FILE_STORAGE_DATA_INDEX = exports.EXECUTE_ROUTE = exports.ENDPOINT_SEARCH_STRATEGY = exports.ENDPOINT_HEARTBEAT_INDEX = exports.ENDPOINT_FIELDS_SEARCH_STRATEGY = exports.ENDPOINT_ERROR_CODES = exports.ENDPOINT_DEFAULT_SORT_FIELD = exports.ENDPOINT_DEFAULT_SORT_DIRECTION = exports.ENDPOINT_DEFAULT_PAGE_SIZE = exports.ENDPOINT_DEFAULT_PAGE = exports.ENDPOINT_ACTION_RESPONSES_INDEX_PATTERN = exports.ENDPOINT_ACTION_RESPONSES_INDEX = exports.ENDPOINT_ACTION_RESPONSES_DS = exports.ENDPOINT_ACTION_LOG_ROUTE = exports.ENDPOINT_ACTIONS_INDEX = exports.ENDPOINT_ACTIONS_DS = exports.BASE_POLICY_ROUTE = exports.BASE_POLICY_RESPONSE_ROUTE = exports.BASE_ENDPOINT_ROUTE = exports.BASE_ENDPOINT_ACTION_ROUTE = exports.AGENT_POLICY_SUMMARY_ROUTE = exports.ACTION_STATUS_ROUTE = exports.ACTION_STATE_ROUTE = exports.ACTION_DETAILS_ROUTE = exports.ACTION_AGENT_FILE_INFO_ROUTE = exports.ACTION_AGENT_FILE_DOWNLOAD_ROUTE = void 0; var _common = require("@kbn/fleet-plugin/common"); var _types = require("./types"); /* * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one * or more contributor license agreements. Licensed under the Elastic License * 2.0; you may not use this file except in compliance with the Elastic License * 2.0. */ /** endpoint data streams that are used for host isolation */ /** for index patterns `.logs-endpoint.actions-* and .logs-endpoint.action.responses-*`*/ const ENDPOINT_ACTIONS_DS = '.logs-endpoint.actions'; exports.ENDPOINT_ACTIONS_DS = ENDPOINT_ACTIONS_DS; const ENDPOINT_ACTIONS_INDEX = `${ENDPOINT_ACTIONS_DS}-default`; exports.ENDPOINT_ACTIONS_INDEX = ENDPOINT_ACTIONS_INDEX; const ENDPOINT_ACTION_RESPONSES_DS = '.logs-endpoint.action.responses'; exports.ENDPOINT_ACTION_RESPONSES_DS = ENDPOINT_ACTION_RESPONSES_DS; const ENDPOINT_ACTION_RESPONSES_INDEX = `${ENDPOINT_ACTION_RESPONSES_DS}-default`; // search in all namespaces and not only in default exports.ENDPOINT_ACTION_RESPONSES_INDEX = ENDPOINT_ACTION_RESPONSES_INDEX; const ENDPOINT_ACTION_RESPONSES_INDEX_PATTERN = `${ENDPOINT_ACTION_RESPONSES_DS}-*`; exports.ENDPOINT_ACTION_RESPONSES_INDEX_PATTERN = ENDPOINT_ACTION_RESPONSES_INDEX_PATTERN; const eventsIndexPattern = 'logs-endpoint.events.*'; exports.eventsIndexPattern = eventsIndexPattern; const alertsIndexPattern = 'logs-endpoint.alerts-*'; // metadata datastream exports.alertsIndexPattern = alertsIndexPattern; const METADATA_DATASTREAM = 'metrics-endpoint.metadata-default'; /** index pattern for the data source index (data stream) that the Endpoint streams documents to */ exports.METADATA_DATASTREAM = METADATA_DATASTREAM; const metadataIndexPattern = 'metrics-endpoint.metadata-*'; /** index that the metadata transform writes to (destination) and that is used by endpoint APIs */ exports.metadataIndexPattern = metadataIndexPattern; const metadataCurrentIndexPattern = 'metrics-endpoint.metadata_current_*'; /** The metadata Transform Name prefix with NO (package) version) */ exports.metadataCurrentIndexPattern = metadataCurrentIndexPattern; const metadataTransformPrefix = 'endpoint.metadata_current-default'; // metadata transforms pattern for matching all metadata transform ids exports.metadataTransformPrefix = metadataTransformPrefix; const METADATA_TRANSFORMS_PATTERN = 'endpoint.metadata_*'; // united metadata transform id exports.METADATA_TRANSFORMS_PATTERN = METADATA_TRANSFORMS_PATTERN; const METADATA_UNITED_TRANSFORM = 'endpoint.metadata_united-default'; // united metadata transform destination index exports.METADATA_UNITED_TRANSFORM = METADATA_UNITED_TRANSFORM; const METADATA_UNITED_INDEX = '.metrics-endpoint.metadata_united_default'; exports.METADATA_UNITED_INDEX = METADATA_UNITED_INDEX; const POLICY_RESPONSE_INDEX = 'metrics-endpoint.policy-default'; exports.POLICY_RESPONSE_INDEX = POLICY_RESPONSE_INDEX; const policyIndexPattern = 'metrics-endpoint.policy-*'; exports.policyIndexPattern = policyIndexPattern; const telemetryIndexPattern = 'metrics-endpoint.telemetry-*'; exports.telemetryIndexPattern = telemetryIndexPattern; const ENDPOINT_HEARTBEAT_INDEX = '.logs-endpoint.heartbeat-default'; // File storage indexes supporting endpoint Upload/download exports.ENDPOINT_HEARTBEAT_INDEX = ENDPOINT_HEARTBEAT_INDEX; const FILE_STORAGE_METADATA_INDEX = (0, _common.getFileMetadataIndexName)('endpoint'); exports.FILE_STORAGE_METADATA_INDEX = FILE_STORAGE_METADATA_INDEX; const FILE_STORAGE_DATA_INDEX = (0, _common.getFileDataIndexName)('endpoint'); // Location from where all Endpoint related APIs are mounted exports.FILE_STORAGE_DATA_INDEX = FILE_STORAGE_DATA_INDEX; const BASE_ENDPOINT_ROUTE = '/api/endpoint'; // Endpoint API routes exports.BASE_ENDPOINT_ROUTE = BASE_ENDPOINT_ROUTE; const HOST_METADATA_LIST_ROUTE = `${BASE_ENDPOINT_ROUTE}/metadata`; exports.HOST_METADATA_LIST_ROUTE = HOST_METADATA_LIST_ROUTE; const HOST_METADATA_GET_ROUTE = `${HOST_METADATA_LIST_ROUTE}/{id}`; exports.HOST_METADATA_GET_ROUTE = HOST_METADATA_GET_ROUTE; const METADATA_TRANSFORMS_STATUS_ROUTE = `${BASE_ENDPOINT_ROUTE}/metadata/transforms`; exports.METADATA_TRANSFORMS_STATUS_ROUTE = METADATA_TRANSFORMS_STATUS_ROUTE; const BASE_POLICY_RESPONSE_ROUTE = `${BASE_ENDPOINT_ROUTE}/policy_response`; exports.BASE_POLICY_RESPONSE_ROUTE = BASE_POLICY_RESPONSE_ROUTE; const BASE_POLICY_ROUTE = `${BASE_ENDPOINT_ROUTE}/policy`; exports.BASE_POLICY_ROUTE = BASE_POLICY_ROUTE; const AGENT_POLICY_SUMMARY_ROUTE = `${BASE_POLICY_ROUTE}/summaries`; /** Suggestions routes */ exports.AGENT_POLICY_SUMMARY_ROUTE = AGENT_POLICY_SUMMARY_ROUTE; const SUGGESTIONS_ROUTE = `${BASE_ENDPOINT_ROUTE}/suggestions/{suggestion_type}`; /** * Action Response Routes */ /** @deprecated use `ISOLATE_HOST_ROUTE_V2` instead */ exports.SUGGESTIONS_ROUTE = SUGGESTIONS_ROUTE; const ISOLATE_HOST_ROUTE = `${BASE_ENDPOINT_ROUTE}/isolate`; /** @deprecated use `ISOLATE_HOST_ROUTE_V2` instead */ exports.ISOLATE_HOST_ROUTE = ISOLATE_HOST_ROUTE; const UNISOLATE_HOST_ROUTE = `${BASE_ENDPOINT_ROUTE}/unisolate`; /** Base Actions route. Used to get a list of all actions and is root to other action related routes */ exports.UNISOLATE_HOST_ROUTE = UNISOLATE_HOST_ROUTE; const BASE_ENDPOINT_ACTION_ROUTE = `${BASE_ENDPOINT_ROUTE}/action`; exports.BASE_ENDPOINT_ACTION_ROUTE = BASE_ENDPOINT_ACTION_ROUTE; const ISOLATE_HOST_ROUTE_V2 = `${BASE_ENDPOINT_ACTION_ROUTE}/isolate`; exports.ISOLATE_HOST_ROUTE_V2 = ISOLATE_HOST_ROUTE_V2; const UNISOLATE_HOST_ROUTE_V2 = `${BASE_ENDPOINT_ACTION_ROUTE}/unisolate`; exports.UNISOLATE_HOST_ROUTE_V2 = UNISOLATE_HOST_ROUTE_V2; const GET_PROCESSES_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/running_procs`; exports.GET_PROCESSES_ROUTE = GET_PROCESSES_ROUTE; const KILL_PROCESS_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/kill_process`; exports.KILL_PROCESS_ROUTE = KILL_PROCESS_ROUTE; const SUSPEND_PROCESS_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/suspend_process`; exports.SUSPEND_PROCESS_ROUTE = SUSPEND_PROCESS_ROUTE; const GET_FILE_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/get_file`; exports.GET_FILE_ROUTE = GET_FILE_ROUTE; const EXECUTE_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/execute`; exports.EXECUTE_ROUTE = EXECUTE_ROUTE; const UPLOAD_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/upload`; /** Endpoint Actions Routes */ exports.UPLOAD_ROUTE = UPLOAD_ROUTE; const ENDPOINT_ACTION_LOG_ROUTE = `${BASE_ENDPOINT_ROUTE}/action_log/{agent_id}`; exports.ENDPOINT_ACTION_LOG_ROUTE = ENDPOINT_ACTION_LOG_ROUTE; const ACTION_STATUS_ROUTE = `${BASE_ENDPOINT_ROUTE}/action_status`; exports.ACTION_STATUS_ROUTE = ACTION_STATUS_ROUTE; const ACTION_DETAILS_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/{action_id}`; exports.ACTION_DETAILS_ROUTE = ACTION_DETAILS_ROUTE; const ACTION_AGENT_FILE_INFO_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/{action_id}/file/{file_id}`; exports.ACTION_AGENT_FILE_INFO_ROUTE = ACTION_AGENT_FILE_INFO_ROUTE; const ACTION_AGENT_FILE_DOWNLOAD_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/{action_id}/file/{file_id}/download`; exports.ACTION_AGENT_FILE_DOWNLOAD_ROUTE = ACTION_AGENT_FILE_DOWNLOAD_ROUTE; const ACTION_STATE_ROUTE = `${BASE_ENDPOINT_ACTION_ROUTE}/state`; exports.ACTION_STATE_ROUTE = ACTION_STATE_ROUTE; const failedFleetActionErrorCode = '424'; exports.failedFleetActionErrorCode = failedFleetActionErrorCode; const ENDPOINT_DEFAULT_PAGE = 0; exports.ENDPOINT_DEFAULT_PAGE = ENDPOINT_DEFAULT_PAGE; const ENDPOINT_DEFAULT_PAGE_SIZE = 10; exports.ENDPOINT_DEFAULT_PAGE_SIZE = ENDPOINT_DEFAULT_PAGE_SIZE; const ENDPOINT_DEFAULT_SORT_FIELD = _types.EndpointSortableField.ENROLLED_AT; exports.ENDPOINT_DEFAULT_SORT_FIELD = ENDPOINT_DEFAULT_SORT_FIELD; const ENDPOINT_DEFAULT_SORT_DIRECTION = 'desc'; exports.ENDPOINT_DEFAULT_SORT_DIRECTION = ENDPOINT_DEFAULT_SORT_DIRECTION; const ENDPOINT_ERROR_CODES = { ES_CONNECTION_ERROR: -272, OUTPUT_SERVER_ERROR: -273 }; exports.ENDPOINT_ERROR_CODES = ENDPOINT_ERROR_CODES; const ENDPOINT_FIELDS_SEARCH_STRATEGY = 'endpointFields'; exports.ENDPOINT_FIELDS_SEARCH_STRATEGY = ENDPOINT_FIELDS_SEARCH_STRATEGY; const ENDPOINT_SEARCH_STRATEGY = 'endpointSearchStrategy'; exports.ENDPOINT_SEARCH_STRATEGY = ENDPOINT_SEARCH_STRATEGY;